Whitelisting clients accessing resources via a secure web gateway with time-based one time passwords for authentication

One or more non-transitory machine-readable media comprising program code for whitelisting a web browser connecting to a web server via a secure web gateway (SWG), the program code to:

• based on detection of a request from the web browser that a connection be established with the web server, determine whether network traffic sent from the web browser can be decrypted;
• based on a determination that the network traffic sent from the web browser cannot be decrypted, communicate a response to the web browser which comprises a request for credentials and an indication of an authentication scheme;
• generate a time-based one time password (TOTP) value based, at least in part, on a current time and a secret key derived for a user of the web browser;
• determine whether a credential value communicated by the web browser can be validated based, at least in part, on the TOTP value and the authentication scheme;
• based on a determination that the credential value can be validated, establish the connection with the web server;
• and
• whitelist the web browser for a first time period.

An apparatus comprising:

• a processor;
• and
• a computer-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
• determine if network traffic sent from a client to a server with which the client has requested that a connection be established can be decrypted;
• based on a determination that the network traffic sent from the client cannot be decrypted, communicate a response to the client that comprises a request for credentials and an indication of an authentication scheme;
• generate a time-based one time password (TOTP) value based, at least in part, on a current time and a secret key derived for a user associated with the client;
• determine if a credential value communicated by the client can be validated based, at least in part, on the TOTP value and the authentication scheme;
• based on a determination that the credential value can be validated, establish the connection with the server;
• and
• whitelist the client for a first time period.