Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-07 14:50:55 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs: clarify how multi-step auth works with external authentication

Browse Source 
Fixes #617
This commit is contained in:
Nicola Murino
2021-11-24 11:27:32 +01:00
parent 8a8298ad46
commit 9fb43b2c46
4 changed files with 73 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/external-auth.md
View File

@@ -39,6 +39,8 @@ If authentication succeeds the HTTP response code must be 200 and the response b
If the authentication fails the HTTP response code must be != 200 or the returned SFTPGo user must have an empty username.
If the hook returns a user who is only allowed to authenticate using public key + password (multi step authentication), your hook will be invoked for each authentication step, so it must validate the public key and password separately. SFTPGo will take care that the client uses the allowed sequence.
Actions defined for users added/updated will not be executed in this case and an already logged in user with the same username will not be disconnected.
The program hook must finish within 30 seconds, the HTTP hook timeout will use the global configuration for HTTP clients.