necouchman commented on PR #915: URL: https://github.com/apache/guacamole-client/pull/915#issuecomment-1749896112
> Does this solve the issue you mention above regarding losing auth state in the redirect to/from Duo? Yeah, this is definitely not solved. So, what currently happens is: * Open Guacamole page, get normal Username + Password prompt. * Redirect to Duo happens, complete Duo authentication. * Redirect back to Guacamole happens, but you get sent to the Username + Password prompt. * If you enter the same username and password, again, it attempts to resume the session with the `state` and `duo_code`. There's some other issue in this step that I need to figure out, but one thing at a time. So, there's something about that redirect back from the Duo authentication to the Guacamole interface that isn't fully resuming the authentication session. My guess is that the `AuthenticationSessionManager` implementation may need to store more than just the Duo session? Unless there's something else I'm missing? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@guacamole.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
