Skip to content

Conversation

@inderpartap
Copy link

Description

Introducting a feature to use single MFA auth session to allow logging in to multiple profiles. The session token and id it stores, is only valid for 5 minutes, so there is low chance of the token being used by a bad actor.

To enable this functionality, set user_use_session_token = true in your [default] config.
When running for the first time, it would prompt MFA, but all subsequent calls to tokendito should result in successful authentication as long as the session is not expired.

Creating this PR to begin the discussion on the possibility of getting this feature to work for all usecases

Related Issue

Motivation and Context

Having to perform MFA verification for multiple calls every morning is quite annoying. I want the ability to connect to multiple profiles that might share the same MFA.

How Has This Been Tested?

  • This has only been tested with Okta verify authenticator.
  • This has only been tested to work when default profile is present and called [default]

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant