Add support for session traps; make mfa challenge session trap; remove DMZ middleware

2020-05-22 09:29:13 -05:00
parent 8701df1acc
commit 64356d42d0
11 changed files with 49 additions and 51 deletions
--- a/config/traps.config.js
+++ b/config/traps.config.js
@@ -9,6 +9,14 @@ const traps_config = {
                '/auth/logout',
            ],
        },
+        mfa_challenge: {
+            redirect_to: '/auth/mfa/challenge',
+            allowed_routes: [
+                '/auth/mfa/challenge',
+                '/api/v1/auth/mfa/attempt',
+                '/auth/logout',
+            ],
+        },
    },
 }