Interface OtpAuthHandler
- All Superinterfaces:
AuthenticationHandler, Handler<RoutingContext>
An auth handler that provides One Time Password (Multi-Factor) Authentication support.
- Author:
- Paulo Lopes
-
Method Summary
Modifier and TypeMethodDescriptionstatic OtpAuthHandlerCreate a new instance of this handler using a hash based one time password authentication provider.static OtpAuthHandlerCreate a new instance of this handler using a time based one time password authentication provider.Configure theissuervalue to be shown in the authenticator URL.Configure thelabelvalue to be shown in the authenticator URL.setupCallback(Route route) Setup the required route where authenticators to submit the challenge response.setupRegisterCallback(Route route) Setup the optional route where authenticators are allowed to register.Specify the URL where requests are to be redirected when a user is already known in the request.
-
Method Details
-
create
Create a new instance of this handler using a time based one time password authentication provider.- Parameters:
totpAuth- the time based OTP provider.- Returns:
- new instance of the handler.
-
create
Create a new instance of this handler using a hash based one time password authentication provider.- Parameters:
hotpAuth- the hash based OTP provider.- Returns:
- new instance of the handler.
-
verifyUrl
Specify the URL where requests are to be redirected when a user is already known in the request. A user is already known when theUserContext.get()is notnull. If no redirect is provided, requests are terminated immediately with status code401.- Parameters:
url- the location where users are to be asked for the OTP code.- Returns:
- fluent self.
-
setupRegisterCallback
Setup the optional route where authenticators are allowed to register. Registration is only allowed on requests with a valid user. A user is valid when theUserContext.get()is notnull.- Parameters:
route- the location where users are to register new authenticator devices/apps.- Returns:
- fluent self.
-
setupCallback
Setup the required route where authenticators to submit the challenge response. Challenges are only allowed on requests with a valid user. A user is valid when theUserContext.get()is notnull.- Parameters:
route- the location where users are to submit challenge responses from authenticator devices/apps.- Returns:
- fluent self.
-
issuer
Configure theissuervalue to be shown in the authenticator URL.- Parameters:
issuer- aStringfor exampleVert.x OTP- Returns:
- fluent self.
-
label
Configure thelabelvalue to be shown in the authenticator URL. When this value is provided it will overwrite the default label which is composed of theissuerand the currentuserid.- Parameters:
label- aStringfor exampleVert.x OTP- Returns:
- fluent self.
-