Step 3: Step-up MFA events
⏱ 5 minLog step-up outcomes after redirectToStepUp completes.
Current flow: Step-up Auth — redirectToStepUp({ resource, action }), not modal APIs.
After step-up gate
const res = await transcodes.redirectToStepUp({
resource: 'documents',
action: 'delete',
});
const gate = res.payload[0];
await transcodes.trackUserAction({
tag: gate?.resource && gate?.action
? `${gate.resource}:${gate.action}`
: 'mcp:stepup',
severity: 'high',
status:
res.success &&
(gate?.decision === 'allow' ||
(gate?.decision === 'stepup' && gate?.status === 'verified')),
metadata: {
type: 'sdk-stepup',
decision: gate?.decision,
},
});Audit tag strings
These are trackUserAction({ tag }) labels, not SDK parameters. For step-up gating, pass resource + action to redirectToStepUp — see Redirect API.
Related
Last updated on