Method enrollWebAuthnFactor

internal/api/mfa.go:198–230

(w http.ResponseWriter, r *http.Request, params *EnrollFactorParams)

}

func (a *API) enrollWebAuthnFactor(w http.ResponseWriter, r *http.Request, params *EnrollFactorParams) error {
	ctx := r.Context()
	user := getUser(ctx)
	config := a.config
	session := getSession(ctx)
	db := a.db.WithContext(ctx)

	if err := validateFactors(db, user, params.FriendlyName, a.config, session); err != nil {
		return err
	}

	factor := models.NewWebAuthnFactor(user, params.FriendlyName)
	err := db.Transaction(func(tx *storage.Connection) error {
		if terr := tx.Create(factor); terr != nil {
			return terr
		}
		if terr := models.NewAuditLogEntry(config.AuditLog, r, tx, user, models.EnrollFactorAction, utilities.GetIPAddress(r), map[string]interface{}{
			"factor_id":   factor.ID,
			"factor_type": factor.FactorType,
		}); terr != nil {
			return terr
		}
		return nil
	})
	if err != nil {
		return err
	}
	return sendJSON(w, http.StatusOK, &EnrollFactorResponse{
		ID:           factor.ID,
		Type:         models.WebAuthn,
		FriendlyName: factor.FriendlyName,
	})
}

func (a *API) enrollTOTPFactor(w http.ResponseWriter, r *http.Request, params *EnrollFactorParams) error {
	ctx := r.Context()