Skip to content

Solve remote MFA websocket routing #1903

@j-chmielewski

Description

@j-chmielewski

The problem:

  • Remote MFA is started by the desktop client and finished by mobile app
  • Desktop client waits (websocket) for the MFA flow to be completed by mobile app
  • Websocket and MFA finish requests can be handled by different proxy instances
  • Both proxies need to get the response to the mfa finish flow
    • Desktop client needs to get the preshared key
    • Mobile client needs to get MFA flow response (success/failure)

Result: Remote MFA process can be completed on a multi-proxy setup regardless of which requests go to which proxy.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

In Progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions