perun
perun copied to clipboard
feat(cli): resolve MFA exception for command line tools
- if Perun throws MfaPrivilegeException, CLI tools need to instruct user to authenticate with Multi-Factor
- this is done by setting enforce_mfa property in OIDC config
- then when authentication request is sent, it prepends MFA acr value so that MFA is done along with standard OIDC authentication
- new access token is given to the user, thus the session is renewed in Perun and MFA role is loaded to the principal