Add TOTP MFA authentication support to Python driver by sharmagot · Pull Request #570 · vertica/vertica-python

sharmagot · 2025-08-07T10:03:07Z

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).
To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.
The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

CLAassistant · 2025-08-07T10:03:14Z

All committers have signed the CLA.

mkottakota1 · 2025-11-07T09:28:29Z

Why Go Unit tests "Corresponding Go unit tests have been added to validate the TOTP-based authentication flow." ??

Please correct this in the description.

setup.py

mkottakota1

Overall, excellent structure — just minor cleanups needed for polish and safety

vertica_python/vertica/connection.py

sharmagot · 2025-11-13T04:24:40Z

Why Go Unit tests "Corresponding Go unit tests have been added to validate the TOTP-based authentication flow." ??

Please correct this in the description.

sharmagot · 2025-11-13T04:25:20Z

Why Go Unit tests "Corresponding Go unit tests have been added to validate the TOTP-based authentication flow." ??

Please correct this in the description.

Corrected the description .

mkottakota1 · 2025-11-18T05:39:09Z

Since, the Git pipelines are failing, I would like to see the local test suite results for the new and existing test cases to avoid regressions.

sharmagot · 2025-11-18T14:53:35Z

Hi @mkottakota1

please find the regression run screenshot.

vertica_python/tests/integration_tests/test_authentication.py

mkottakota1 · 2025-11-25T05:52:41Z

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).

To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.

The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

Fix the test case name

mkottakota1 · 2025-11-25T05:55:12Z

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).

To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.

The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).

To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.

The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

Fix the test case name

sharmagot · 2025-11-25T10:42:16Z

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).

To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.

The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

Vertica supports TOTP-based authentication as part of multi-factor authentication (MFA).

To enable MFA for a new user, create the user with the following command:

CREATE USER ravi IDENTIFIED BY 'vertica' ENFORCEMFA;

After the user is created, the generated secret key must be added to a TOTP app like Microsoft Authenticator.

The TOTP app will generate a time-based code every 30 seconds, which is required during user login.

Screenshot of testcase :

Fix the test case name

Hi Mani , I have updated the code based on your review comment.

mkottakota1 · 2025-11-26T08:43:27Z

vertica_python/tests/integration_tests/test_authentication.py

+                cur.execute("GRANT AUTHENTICATION totp_auth TO totp_user")
+
+                # Generate TOTP
+                import pyotp


pyotp is imported 2 times.

Corrected it .

mkottakota1 · 2025-11-26T08:49:45Z

vertica_python/tests/integration_tests/test_authentication.py

+    import os
+    import pyotp
+    import pytest
+    import vertica_python


Keep only required imports.

Hi Mani , Kept only required import .

mkottakota1

Reviewed the code changes and changes are look good to me.

…e technical details

…rectly

sharmagot requested a review from ssharieff21 August 7, 2025 10:03

sharmagot requested a review from vipulkotfi August 12, 2025 03:56

sharmagot requested a review from viveknair1 August 22, 2025 08:06

sharmagot requested a review from mkottakota1 November 6, 2025 09:32

mkottakota1 reviewed Nov 7, 2025

View reviewed changes

setup.py Show resolved Hide resolved

mkottakota1 reviewed Nov 7, 2025

View reviewed changes

sharmagot closed this Nov 13, 2025

sharmagot reopened this Nov 13, 2025

mkottakota1 reviewed Nov 25, 2025

View reviewed changes

vertica_python/tests/integration_tests/test_authentication.py Outdated Show resolved Hide resolved

sharmagot force-pushed the VE-4892527-Python-Driver-MFA branch from d60fecc to f11da77 Compare November 26, 2025 05:51

mkottakota1 reviewed Nov 26, 2025

View reviewed changes

mkottakota1 approved these changes Nov 26, 2025

View reviewed changes

sharmagot force-pushed the VE-4892527-Python-Driver-MFA branch 4 times, most recently from 243d519 to 93afc78 Compare November 26, 2025 12:48

root added 5 commits November 26, 2025 08:38

Refactor error handling to show clean authentication messages and hid…

51b7dab

…e technical details

Added a 5-minute timeout for TOTP input during authentication

c637e99

Fix TOTP prompt and validation to handle blank and invalid inputs cor…

2e5be52

…rectly

Removed the emoji symbols.

fcd3855

tests: cover valid and invalid TOTP authentication flows

b44526c

Fixing intermidate toke fetch issue in pipeline

0282333

sharmagot force-pushed the VE-4892527-Python-Driver-MFA branch from 93afc78 to 0282333 Compare November 26, 2025 13:45

Bump version to 1.5.0 and add pyotp dependency

0271831

sharmagot merged commit c42d663 into master Nov 26, 2025
1 of 22 checks passed

Conversation

sharmagot commented Aug 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

CLAassistant commented Aug 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mkottakota1 commented Nov 7, 2025

Uh oh!

Uh oh!

mkottakota1 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sharmagot commented Nov 13, 2025

Uh oh!

sharmagot commented Nov 13, 2025

Uh oh!

mkottakota1 commented Nov 18, 2025

Uh oh!

sharmagot commented Nov 18, 2025

Uh oh!

Uh oh!

mkottakota1 commented Nov 25, 2025

Uh oh!

mkottakota1 commented Nov 25, 2025

Uh oh!

sharmagot commented Nov 25, 2025

Uh oh!

mkottakota1 Nov 26, 2025

Choose a reason for hiding this comment

Uh oh!

sharmagot Nov 26, 2025

Choose a reason for hiding this comment

Uh oh!

mkottakota1 Nov 26, 2025

Choose a reason for hiding this comment

Uh oh!

sharmagot Nov 26, 2025

Choose a reason for hiding this comment

Uh oh!

mkottakota1 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

sharmagot commented Aug 7, 2025 •

edited

Loading

CLAassistant commented Aug 7, 2025 •

edited

Loading