Enhanced VideoBiz Sample Application

The VideoBiz sample application has been upgraded to showcase three new features introduced in Panther 5.60:

• Dynamic Labels with QR Code Rendering (Windows only)
• Multifactor Authentication (MFA) via TOTP Codes
• Python Scripting Integration

Sample Location

• Enhanced Sample:
  Windows: %SMBASE%\samples\vidstore-mfa\
  Linux: $SMBASE/samples/vidstore-mfa/
• Original Sample:
  Windows: %SMBASE%\samples\vidstore\
  Linux: $SMBASE/samples/vidstore/

Original documentation for VideoBiz is available at docs.prolifics.com.

Configuration

The vidstore-mfa sample folder does not include all components found in the original vidstore sample. Instead, it provides updated versions of two key files:

• videobiz.lib – Panther screen library
• videobiz – Panther JDB database file

These files are designed as drop-in replacements for the files of the same name in the original vidstore sample application. To configure the enhanced sample:

1. Navigate to your existing vidstore sample directory.
2. Backup the original videobiz.lib and videobiz files if needed.
3. Copy the updated files from vidstore-mfa into the vidstore directory, overwriting the originals.

This approach allows you to run the enhanced sample within the original application context, while preserving all other supporting components.

Python-Driven Enhancements

When Python scripting is enabled, the main screen in videobiz.lib displays a new Change Password checkbox beneath the Logon and Password fields. These appear only when the Employee Login radio button is selected.

Conditional logic in the screen's JPL code has been updated to invoke two new screens:

• mfa_setup - Multi-Factor Authentication Setup
• totpauth   - TOTP Authentication Challenge

There is but one line assigned to the Python Script property. It sets the value of the python_enabled hidden field value to 1, indicating that Python is enabled. This flag allows JPL logic to conditionally trigger MFA functionality only when Python is active.

MFA Setup: mfa_setup Screen

The first time an employee logs in (e.g., sheila/trade3), the Multi-Factor Authentication Setup screen appears. It displays a QR Code and setup instructions.

QR Code Rendering

• The label named qr_code has its QR Code property set to Yes.
• In Windows Test/Application mode, the label graphically encodes the text assigned to it.
• Python code dynamically updates the label via a control string attached to the Regenerate button.

All logic for this screen is written in Python and assigned to the screen's Python Script property. It demonstrates Panther-Python integration, including database access.

Upon clicking Submit, the auto-generated client secret is saved into the totp_secret column of the users table in the videobiz database for the present user. The totp_secret column is new for the videobiz JDB database that is provided with the enhanced VideoBiz sample application. A videobiz.sql script is also provided for use with the Panther JDB ISQL utility in order to recreate the videobiz database from scratch.

TOTP Challenge: totpauth Screen

Subsequent logins for employees with MFA enabled will trigger the TOTP Authentication screen.

This screen prompts the user to enter a 6-digit TOTP code. For instructional purposes, the correct code is displayed on-screen. If your authenticator app is properly configured, it will show a Videobiz entry for the user, with a code that refreshes every 30 seconds.

Note: The screen does not update its expected code every 30 seconds. It validates the code that was current when the screen opened.

Python-Only Logic

The totpauth screen contains no JPL code, only Python. It demonstrates use of the new Panther library function:

sm_generate_totp - generates TOTP given a secret key

SYNOPSIS
    totp = sm_generate_totp(key, digits)
    char *totp;
    char *key;
    int  digits;

DESCRIPTION
    Returns a TOTP (Time-based One-time Password) for a given secret key.
    The digits argument specifies the number of digits (typically 6).
    The algorithm matches standard authenticator apps, enabling verification
    of user-entered codes against generated values.

RETURNS
    totp = temporary buffer containing the TOTP code
         = NULL on failure
  

Revisiting MFA Setup

If MFA has already been configured for an employee, selecting the Change Password checkbox before login will reopen the mfa_setup screen after successful authentication. This time, the screen includes fields to:

• Change the user's password
• Generate and save a new client secret key (optional)

[SAVED] appears next to the secret code that was previously saved. The instructions remain the same.