Ruby on Rails Quickstart for Twilio Authy Two-factor Authentication

1
ACCOUNT_SECURITY_API_KEY: YOUR APP_KEY
2

1
class Api::TwofaController < ApplicationController
2
  def sms()
3
    user = User.find_by(username: session[:username])
4

5
    if ! user
6
      render json: { err: 'Username Not Found' }, status: :internal_server_error and return
7
    end
8

9
    response = Authy::API.request_sms(id: user.authy_id)
10

11
    if ! response.ok?
12
      render json: { err: 'Error requesting SMS token' }, status: :internal_server_error and return
13
    end
14

15
    render json: response, status: :ok
16
  end
17

18
  def voice()
19
    user = User.find_by(username: session[:username])
20

21
    if ! user
22
      render json: { err: 'Username Not Found' }, status: :internal_server_error and return
23
    end
24

25
    response = Authy::API.request_phone_call(id: user.authy_id)
26

27
    if ! response.ok?
28
      render json: { err: 'Error requesting Phone call token' }, status: :internal_server_error and return
29
    end
30

31
    render json: response, status: :ok
32
  end
33

34
  def verify()
35
    user = User.find_by(username: session[:username])
36

37
    if ! user
38
      render json: { err: 'Username Not Found' }, status: :internal_server_error and return
39
    end
40

41
    response = Authy::API.verify(:id => user.authy_id, :token => params[:token])
42

43
    if ! response.ok?
44
      render json: { err: 'Verify Token Error' }, status: :internal_server_error and return
45
    end
46

47
    session[:authy] = true
48
    render json: response, status: :ok
49
  end
50

51
  def onetouchstatus()
52
    user = User.find_by(username: session[:username])
53

54
    if ! user
55
      render json: { err: 'Username Not Found' }, status: :internal_server_error and return
56
    end
57

58
    status = Authy::OneTouch.approval_request_status({uuid: session[:uuid]})
59

60
    if ! status.ok?
61
      render json: { err: 'One Touch Status Error' }, status: :internal_server_error and return
62
    end
63

64
    if status['approval_request']['approval_request'] == 'approved'
65
      session.delete(:uuid) || session.delete('uuid')
66
      session[:authy] = true
67
    end
68

69
    render json: {body: status}, status: :ok
70
  end
71

72
  def onetouch()
73
    user = User.find_by(username: session[:username])
74

75
    if ! user
76
      render json: { err: 'Username Not Found' }, status: :internal_server_error and return
77
    end
78

79
    one_touch = Authy::OneTouch.send_approval_request(
80
      id: user.authy_id,
81
      message: 'Login requested for Account Security account.',
82
      details: {
83
        AuthyID: user.authy_id,
84
        Username: user.username,
85
        Location: 'San Francisco, CA',
86
        Reason: 'Demo by Account Security'
87
      },
88
      hidden_details: { test: "This is a" }
89
    )
90

91
    if ! one_touch.ok?
92
      render json: { err: 'Create Push Error' }, status: :internal_server_error and return
93
    end
94

95
    session[:uuid] = one_touch.approval_request['uuid']
96

97
    render json: one_touch, status: :ok
98
  end
99
end
100