Files
teleport/api/ssh
Chris Thachandrosstimothy 25931088b3 Add AuthCallback to SSH clients to perform in-band MFA (#65904)
* Add AuthCallback to SSH clients for in-band MFA.

Signed-off-by: Chris Thach <[email protected]>

* Name return val. Rename to createPerformer. Add lint rule num.

Signed-off-by: Chris Thach <[email protected]>

* Document why mfaPromptCount is 2. Use cmp to compare got/want conf.

Signed-off-by: Chris Thach <[email protected]>

* Convert to table test for TestAuthCallback.

Signed-off-by: Chris Thach <[email protected]>

* Replace terminal.WSConn with *terminal.Stream.

Signed-off-by: Chris Thach <[email protected]>

* Update comment to reflect uniqueness. Normalize test indentation.

Signed-off-by: Chris Thach <[email protected]>

* Clean nolint gosec, proposal comment and dead MFAServiceClient method.

Signed-off-by: Chris Thach <[email protected]>

* Comments for AuthCallback more future proof. Restore MFACeremonyPerformer.

Signed-off-by: Chris Thach <[email protected]>

* Reuse ClusterClient.

Signed-off-by: Chris Thach <[email protected]>

* Increase timeout when MFA might happen.

Signed-off-by: Chris Thach <[email protected]>

* Extend timeout for only the SSH handshake and preserve timeout for TCP dial.

Signed-off-by: Chris Thach <[email protected]>

* Unexport timeout const.

Signed-off-by: Chris Thach <[email protected]>

* Restore named error.

Co-authored-by: rosstimothy <[email protected]>

* Use AuthCallbackConfig. Remove helper and restore inlining.

Signed-off-by: Chris Thach <[email protected]>

---------

Signed-off-by: Chris Thach <[email protected]>
Co-authored-by: rosstimothy <[email protected]>
2026-06-29 14:28:54 +00:00
..