Fix for DUO Universal Prompt authentication

SMxJrz · SMxJrz · commit 8bdb20ef7f5a · 2024-01-29T10:17:05.000-05:00
Changing re.sub in line 147 of this file to look for ANY digit in front of the "v" part. We ran into an issue in our environment because the original code here was looking for v4 and our DUO setup was set to v3, so this replacement never happened and resulted in a malformed URL leading to 403 responses from the DUO server.

Signed-off-by: smxjrz &lt;Smelecs@gmail.com&gt;
diff --git a/aws_adfs/_duo_universal_prompt_authenticator.py b/aws_adfs/_duo_universal_prompt_authenticator.py
@@ -145,7 +145,7 @@ def _perform_authentication_transaction(
     ssl_verification_enabled,
 ):
     duo_host = re.sub(
-        r"/frame/frameless/v4/auth.*",
+        r"/frame/frameless/v\d+/auth.*",
         "",
         duo_url,
     )

Original file line number	Diff line number	Diff line change
`@@ -145,7 +145,7 @@ def _perform_authentication_transaction(`
`145`	`145`	`ssl_verification_enabled,`
`146`	`146`	`):`
`147`	`147`	`duo_host = re.sub(`
`148`		`- r"/frame/frameless/v4/auth.*",`
	`148`	`+ r"/frame/frameless/v\d+/auth.*",`
`149`	`149`	`"",`
`150`	`150`	`duo_url,`
`151`	`151`	`)`