Add support for one-time security codes

cevoaustralia / aws-google-auth

Provides AWS STS credentials based on Google Apps SAML SSO auth (what a jumble!)

MIT License

537 stars 181 forks source link

Add support for one-time security codes #226

Open volkangurel opened 3 years ago

volkangurel commented 3 years ago

This PR adds support for one-time security codes based on https://github.com/andreaso/aws-google-auth/tree/wip/skotp-support, and (at least partially) solves https://github.com/cevoaustralia/aws-google-auth/issues/202.

Tested locally, with a Google account configured with security keys. Tests included logins when other 2FA methods were also configured on the account.

cmfcruz commented 3 years ago

This change even allows the docker image users to verify using they Yubikey since the verification is done on the browser.

inhumantsar commented 2 years ago

Test logs aren't available anymore but it's passing on clean venvs of Python 3.9, 3.8, and 3.7 on OSX.

@stevemac007 is there anything this needs? Would really like to get it implemented.

jmymy commented 2 years ago

any update on this? might have to rip out and go with AWS SSO