Merge feature/ENG-1111/mfa-lambda

fusionauth-netcore-client/domain/io/fusionauth/domain/LambdaConfiguration.cs

@@ -27,6 +27,8 @@ public class LambdaConfiguration {
 
     public Guid? idTokenPopulateId;
 
+    public Guid? multiFactorRequirementId;
+
     public Guid? samlv2PopulateId;
 
     public Guid? selfServiceRegistrationValidationId;

fusionauth-netcore-client/domain/io/fusionauth/domain/LambdaType.cs

@@ -52,6 +52,7 @@ public enum LambdaType {
         SCIMServerUserResponseConverter, 
         SelfServiceRegistrationValidation, 
         UserInfoPopulate, 
-        LoginValidation
+        LoginValidation, 
+        MFARequirement
   }
 }

fusionauth-netcore-client/domain/io/fusionauth/domain/MultiFactorAction.cs

@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain
+{
+
+  /**
+   * Communicate various actions/contexts in which multi-factor authentication can be used.
+   */
+  public enum MultiFactorAction {
+        changePassword, 
+        login, 
+        stepUp
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/TenantLambdaConfiguration.cs

@@ -28,6 +28,8 @@ public class TenantLambdaConfiguration {
 
     public Guid? loginValidationId;
 
+    public Guid? multiFactorRequirementId;
+
     public Guid? scimEnterpriseUserRequestConverterId;
 
     public Guid? scimEnterpriseUserResponseConverterId;

fusionauth-netcore-client/domain/io/fusionauth/domain/api/twoFactor/TwoFactorStatusRequest.cs

@@ -0,0 +1,46 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using io.fusionauth.domain.api;
+using io.fusionauth.domain;
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.api.twoFactor
+{
+
+  /**
+   * Check the status of two-factor authentication for a user, with more options than on a GET request.
+   */
+  public class TwoFactorStatusRequest: BaseEventRequest {
+
+    public Guid? userId;
+
+    public MultiFactorAction action;
+
+    public Guid? applicationId;
+
+    public string token;
+
+    public string twoFactorTrustId;
+
+    public TwoFactorStatusRequest with(Action<TwoFactorStatusRequest> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/lambda/parameters/MFAContext.cs

@@ -0,0 +1,45 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using io.fusionauth.domain;
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.lambda.parameters
+{
+
+  /**
+   * Represents the inbound lambda parameter 'context' for MFA Required lambdas.
+   */
+  public class MFAContext {
+
+    public List<AuthenticationThreats> authenticationThreats;
+
+    public EventInfo @eventInfo;
+
+    public IDictionary<string, object> jwt;
+
+    public MFATrust mfaTrust;
+
+    public UserRegistration registration;
+
+    public MFAContext with(Action<MFAContext> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/lambda/parameters/MFAPolicies.cs

@@ -0,0 +1,41 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using io.fusionauth.domain;
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.lambda.parameters
+{
+
+  /**
+   * Represents the inbound lambda parameter 'policies' for MFA Required lambdas.
+   */
+  public class MFAPolicies {
+
+    public MultiFactorLoginPolicy applicationLoginPolicy;
+
+    public ApplicationMultiFactorTrustPolicy applicationMultiFactorTrustPolicy;
+
+    public MultiFactorLoginPolicy tenantLoginPolicy;
+
+    public MFAPolicies with(Action<MFAPolicies> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/lambda/parameters/MFARequiredLambdaResult.cs

@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.lambda.parameters
+{
+
+  /**
+   * Represents the inbound lambda parameter 'result' for MFA Required lambdas.
+   */
+  public class MFARequiredLambdaResult {
+
+    public bool? required;
+
+    public bool? sendSuspiciousLoginEvent;
+
+    public MFARequiredLambdaResult with(Action<MFARequiredLambdaResult> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/lambda/parameters/MFATrust.cs

@@ -0,0 +1,52 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.lambda.parameters
+{
+
+  /**
+   * Represents the inbound lambda parameter 'mfaTrust' inside the 'context' parameter for MFA Required lambdas.
+   */
+  public class MFATrust {
+
+    public Guid? applicationId;
+
+    public IDictionary<string, string> attributes;
+
+    public DateTimeOffset? expirationInstant;
+
+    public string id;
+
+    public DateTimeOffset? insertInstant;
+
+    public StartInstant startInstants;
+
+    public IDictionary<string, object> state;
+
+    public Guid? tenantId;
+
+    public Guid? userId;
+
+    public MFATrust with(Action<MFATrust> action) {
+      action(this);
+      return this;
+    }
+  }
+}

fusionauth-netcore-client/domain/io/fusionauth/domain/lambda/parameters/StartInstant.cs

@@ -0,0 +1,35 @@
+/*
+ * Copyright (c) 2018-2025, FusionAuth, All Rights Reserved
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+ * either express or implied. See the License for the specific
+ * language governing permissions and limitations under the License.
+ */
+
+
+using System.Collections.Generic;
+using System;
+
+namespace io.fusionauth.domain.lambda.parameters
+{
+
+  public class StartInstant {
+
+    public IDictionary<Guid, DateTimeOffset> applications;
+
+    public DateTimeOffset? tenant;
+
+    public StartInstant with(Action<StartInstant> action) {
+      action(this);
+      return this;
+    }
+  }
+}