WebSDK v2 to WebSDK v4 Code Migration Guide

demos/flask/app.py

@@ -3,9 +3,9 @@
 import sys
 import argparse
 import flask
-import duo_web
+import duo_universal
 
-app = flask.Flask(__name__, static_url_path='', static_folder='static')
+app = flask.Flask(__name__)
 app.secret_key = os.urandom(32)
 
 @app.route("/", methods=['GET'])
@@ -17,29 +17,48 @@ def do_GET():
     if username is None:
         return 'user query parameter is required', 400
 
-    sig_request = duo_web.sign_request(app.ikey, app.skey, app.akey, username)
-    return flask.render_template('index.html', host=app.host, sig_request=sig_request)
+    try:
+        app.duo_client.health_check()
+    except duo_universal.DuoException:
+        return 'Duo health check failed. Logged in without 2FA as %s.' % username
+        # alternatively: return 'Duo health check failed, denying login.'
 
-@app.route("/", methods=['POST'])
-def do_POST():
-    sig_response = flask.request.form.get('sig_response')
-    if sig_response is None:
-        return 'sig_response post parameter is required', 400
-    user = duo_web.verify_response(
-        app.ikey, app.skey, app.akey, sig_response)
+    state = app.duo_client.generate_state()
+    prompt_uri = app.duo_client.create_auth_url(username, state)
 
-    if user is None:
+    flask.session['state'] = state
+    flask.session['username'] = username
+
+    return flask.redirect(prompt_uri)
+
+@app.route("/duo-callback", methods=['GET'])
+def do_duo_callback():
+    state = flask.session['state']
+    username = flask.session['username']
+
+    if (state is None) or (username is None) or (state != flask.request.args.get('state')):
+        return 'Invalid state or username'
+
+    duo_code = flask.request.args.get('duo_code')
+    if duo_code is None:
+        return 'duo_code post parameter is required', 400
+
+    try:
+        app.duo_client.exchange_authorization_code_for_2fa_result(duo_code, username)
+    except duo_universal.DuoException:
         return 'Did not authenticate with Duo.'.encode('utf-8')
 
-    return ('Authenticated with Duo as %s.' % user).encode('utf-8')
+    return ('Authenticated with Duo as %s.' % username).encode('utf-8')
 
 
-def main(ikey, skey, akey, host, port=8080):
+def main(client_id, client_secret, host, redirect_uri, port=8080):
     port = int(port)
-    app.ikey = ikey
-    app.skey = skey
-    app.akey = akey
-    app.host = host
+    app.duo_client = duo_universal.Client(
+        client_id=client_id,
+        client_secret=client_secret,
+        host=host,
+        redirect_uri=redirect_uri
+    )
     print("Visit the root URL with a 'user' argument, e.g.")
     print("'http://localhost:%d/?user=myname'." % port)
     app.run(host="0.0.0.0", port=8080)

demos/flask/duo.conf

@@ -2,7 +2,7 @@
 
 [duo]
 
-ikey = ikey
-skey = skey
-akey = akey
+client_id = client_id
+client_secret = client_secret
 host = host
+redirect_uri = http://localhost:8080/duo-callback

demos/flask/requirements.txt

@@ -1,3 +1,3 @@
-duo-web
+duo-universal
 flask
 six==1.14.0