Skip to content

mfa capabilities in instance info #97

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
filipslezaklab merged 1 commit into from
Oct 2, 2026
Merged

mfa capabilities in instance info #97

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions common/client_types.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,8 @@ message InstanceInfo {
// [2.2] Lightweight summary of the enrolled user's configured MFA methods.
// Used for quick checks (e.g. "does this user have any MFA methods?").
MfaUserState mfa_user_state = 11;
// [2.2] absent when this core cannot configure mfa from the client
MfaCapabilities mfa_capabilities = 12;
}

message DeviceConfigResponse {
Expand Down Expand Up @@ -232,6 +234,15 @@ message MfaUserState {
repeated MfaMethod configured_methods = 1;
}

// [2.2] factors an mfa configuration session supports, static per core version.
// current availability comes from MfaConfigStartResponse and MfaUserState.
message MfaCapabilities {
// accepted by CodeMfaSetupStart and CodeMfaSetupFinish
repeated MfaMethod setup_methods = 1;
// accepted by MfaConfigAuthorize
repeated MfaMethod authorize_methods = 2;
}

// Why a step of the submitted plan was refused at Start. Every reason names one
// specific step. A plan whose length does not match the resolved flow is a
// malformed request and is refused with an INVALID_ARGUMENT status instead of
Expand Down
Loading