gve-sw / gve_devnet_duo_manual_push_auth

Description

gve_devnet_duo_manual_push_auth

This application provides a secure, web-based interface for Duo Administrators to verify the identity of individuals calling into branch locations. It leverages Duo's two-factor authentication system to ensure that callers are who they claim to be, thereby enhancing security and preventing unauthorized access to sensitive information.

Contacts

• Rey Diaz
• Mark Orszycki

Solution Components

• Authentication: Cisco Duo API
• Frontend: React JS
• Backend: FastAPI + Uvicorn (Python)

Key Features

1. Duo Integration: Seamlessly integrates with Duo's API, enabling branch staff to send a Duo push notification for user verification.
2. User Verification: Allows branch employees to search for a user (e.g., an executive) and initiate a Duo push notification to verify their identity during phone calls.
3. Secure Branch Access: Incorporates a login system for branch locations, ensuring that only authorized personnel can use the application to initiate verification requests.
4. Frontend Interface: Provides a user-friendly frontend, built with React.js, enabling staff to easily navigate and use the system.
5. Backend API: Utilizes a robust FastAPI backend for handling authentication logic, API integration, and data processing.

Installation/Configuration

Backend

Retrieve Duo Credentials

1. Follow the instructions under 'First Steps' to get your Duo integration key, secret key and API hostname: https://duo.com/docs/authapi.
2. Clone this repository with git clone git clone https://github.com/gve-sw/gve_devnet_duo_manual_push_auth.git.
3. Create and update .env (see below)
4. Proceed to 'usage' section.

Create and update .env

Create .env in backend/config/:

cd backend/config
touch .env
open .env

Copy/Paste the .env variables and update accordingly:

APP_NAME='Duo Manual Push Authentication'
APP_VERSION=1.0
LOGGER_LEVEL=DEBUG
DUO_API_URL=YOUR_API_HOSTNAME
DUO_IKEY=YOUR_DUO_INTEGRATION_KEY
DUO_SKEY=YOUR_DUO_SECRET_KEY
DUO_ADMIN_API_URL=YOUR_ADMIN_API_HOSTNAME
DUO_ADMIN_IKEY=YOUR_DUO_ADMIN_INTEGRATION_KEY
DUO_ADMIN_SKEY=YOUR_DUO_ADMIN_SECRET_KEY

• Note: APP_NAME and APP_VERSION are for auto-generated FastAPI docs at uvicorn_running_url/docs (i.e. http://127.0.0.1:8000/docs )

Usage

With Docker

1. To build and start the containers, run: docker-compose up --build

2. Navigate to URL: http://localhost:5173/

3. To stop the containers and remove them along with their network, run: docker-compose down

Without Docker

1. Start Frontend

Terminal 1:

cd frontend
npm install
npm run dev

2. Start Backend

Terminal 2:

cd backend
uvicorn main:app --reload

3. Navigate to Frontend URL:

http://localhost:5173/

Screenshots

Home:

App:

Endpoint Docs

LICENSE

Provided under Cisco Sample Code License, for details see LICENSE

CODE_OF_CONDUCT

Our code of conduct is available here

CONTRIBUTING

See our contributing guidelines here

DISCLAIMER:

Please note: This script is meant for demo purposes only. All tools/ scripts in this repo are released for use "AS IS" without any warranties of any kind, including, but not limited to their installation, use, or performance. Any use of these scripts and tools is at your own risk. There is no guarantee that they have been through thorough testing in a comparable environment and we are not responsible for any damage or data loss incurred with their use. You are responsible for reviewing and testing any scripts you run thoroughly before use in any non-testing environment.