Merge pull request #5 from OneIdentity/feature/add-askpass

feature: add askpass config parameter

MANIFEST

@@ -1,6 +1,6 @@
 name: SPS_AA_Skeleton
 description: This is an example Python3 AA plugin
-version: 1.0.0
+version: 1.1.0
 type: aa
 api: 1.1
 entry_point: main.py

default.cfg

@@ -1,5 +1,8 @@
 [skeleton]
 
+# To enable or disable asking for MFA password, configure 'ask_pass'.
+; ask_pass=yes
+
 #
 # The follow comes from the Plugin SDK documentation on
 # https://oneidentity.github.io/safeguard-sessions-plugin-sdk/

plugin/plugin_bare.py

@@ -23,6 +23,13 @@
 
 
 class Plugin(AAPlugin):
+
+    def _extract_mfa_password(self):
+        if self.plugin_configuration.getboolean("skeleton", "ask_pass", default=True):
+            return super()._extract_mfa_password()
+        else:
+            return 'can pass'
+
     def do_authenticate(self):
         return AAResponse.accept('the reason to accept')
 

plugin/tests/unit/test_plugin.py

@@ -1,6 +1,6 @@
 from ...plugin_bare import Plugin
 
-def test_authenticate_denies():
+def test_authenticate_accepts():
     config=''
     parameters=dict(
         cookie={},