David Bateman
9bc2847712
Correct typos and error in all comments of the PR
2026-04-15 13:14:01 +01:00
David Bateman
00ff730051
Stupid cut/paste/edit mistake
2026-04-13 15:49:41 +01:00
David Bateman
fd0ae00836
Copy/Paste editing error
2026-04-13 15:49:37 +01:00
David Bateman
024a69695c
Replace openid-auth-timeout with openid-max-pkce-verifier-validity for consistency with openid-max-nonce-validity
2026-04-13 15:49:33 +01:00
David Bateman
b302cf5276
No body in JsonUrlReader for GET method
2026-04-13 15:49:28 +01:00
David Bateman
21e97e480c
Replace use of java.net.HttpURLConnection with jav.net.http.HttpClient, make the outboud url connection asynchronous
2026-04-13 15:49:23 +01:00
David Bateman
a48665bf60
Print detected OIDC well-known information at debug-level equals info
2026-04-13 15:49:19 +01:00
David Bateman
64f0abeafb
Remove some no longer used imports for TokenValidationService
2026-04-13 15:49:14 +01:00
David Bateman
ae22b4116a
Treat review comments
2026-04-13 15:49:08 +01:00
David Bateman
08bcd1f9e8
- Add openid-well-known-endpoint and treat it to automatically find the :
...
* issuer,
* authorization_endpoint,
* token_endpoint,
* jwks_uri
- Replace openid-flow-type with openid-response-type
- Use an Enum for openid-response-type to limit to the values 'id_token',
'token' or 'cod'
- Treat the response type as an implicit flow type allowing use of AWS
Cognito
2026-04-13 15:49:01 +01:00
David Bateman
4dfb4b5c66
Remove accidentally committed files
2026-04-13 15:48:57 +01:00
David Bateman
f930e76bfa
Minor white-spece, import changes to minimize impact on existing code
2026-04-13 15:48:50 +01:00
David Bateman
5af9d38a7c
Reinclude accidentally removed check if implicit token is null
2026-04-13 15:48:45 +01:00
David Bateman
95f9d525ae
Use SessionManager directly from getLoginURI to store PKCE removing the need for local REST redirect and callback function
2026-04-13 15:48:38 +01:00
David Bateman
4b5ed08b00
Add code flow authorisation type, with or without a client secret and with or without pkce
2026-04-13 15:48:28 +01:00
Safa Bayar
c36ace657d
GUACAMOLE-1266 Alphabetical reorder fix of import, and js block
2026-01-31 23:23:13 -05:00
Safa Bayar
8ec4d816c4
GUACAMOLE-1266 Remove local js testing lines in pom
2026-01-30 22:35:05 -05:00
Safa Bayar
7c237334e7
GUACAMOLE-1266 SAML Single Logout
2026-01-26 18:42:12 -05:00
Safa Bayar
4763856847
GUACAMOLE-519: MR code review change to simplify getPostLogoutRedirect
2026-01-25 20:31:37 -05:00
Safa Bayar
903fdebf94
GUACAMOLE-519: fix api endpoint forwarding to use logout address
2026-01-18 20:34:17 -05:00
Safa Bayar
12bcea5c65
GUACAMOLE-519: Javascript fix in module to forward to openid logout endpoint
2026-01-18 08:57:55 -05:00
Safa Bayar
d3d1a980da
GUACAMOLE-519: Implement Single Logout on OpenID Extension
2026-01-17 22:25:55 -05:00
Michael Jumper
87371e608c
GUACAMOLE-2139: Inherit guacamole-client version via "revision" property (supported since Maven 3.5.0).
2025-12-25 14:54:31 -08:00
Michael Jumper
10f606c418
GUACAMOLE-2139: Automatically set expected Guacamole version of extensions in build.
2025-12-24 13:17:05 -08:00
Michael Jumper
d5b33778bf
GUACAMOLE-2139: Bump version number to 1.6.1.
2025-12-24 12:55:11 -08:00
Virtually Nick
4aa841c4f8
GUACAMOLE-2181: Merge improve readability of logs.
2025-12-12 19:32:46 -06:00
Michael Jumper
ea06e01ddd
GUACAMOLE-2181: Rely on automatic stack traces for debug-level logs.
2025-12-08 20:24:10 -08:00
Turab Garip
325bc65417
GUACAMOLE-2173: New language strings added and typos fixed for Turkish language
2025-12-05 09:57:03 +03:00
Michael Jumper
29b56ff3cf
GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces.
...
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
2025-04-23 11:31:10 -07:00
Michael Jumper
0103b27547
GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username.
...
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
2025-04-14 23:35:34 -07:00
Virtually Nick
b9f43cd8f0
GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials.
2025-04-14 22:19:05 -04:00
Michael Jumper
4670ad0b90
GUACAMOLE-2052: Maintain independent copy of request details in Credentials.
2025-04-14 18:45:04 -07:00
Virtually Nick
5c3ddb4f00
GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth.
2025-04-10 06:27:46 -04:00
Michael Jumper
91d47fea58
GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header.
...
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
2025-04-10 01:25:57 -07:00
Michael Jumper
0f80d0ddf2
GUACAMOLE-839: Fix check for lack of request headers (may be null).
2025-04-10 01:24:01 -07:00
Michael Jumper
95dc96cf33
GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl").
...
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.
The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
2025-04-08 11:25:29 -07:00
Michael Jumper
bcdb62fbe7
GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9).
2025-03-04 02:41:37 -08:00
Michael Jumper
51afe5ade8
GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0).
2025-03-04 02:31:02 -08:00
Michael Jumper
78990d97dd
GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80).
2025-03-04 02:31:02 -08:00
Michael Jumper
2df43bce9c
GUACAMOLE-1956: Update Java dependencies to latest compatible.
2025-01-02 15:55:36 -08:00
Michael Jumper
ce98043c16
GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible.
2025-01-01 21:03:04 -08:00
Virtually Nick
ddd09969d8
GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration.
2024-10-31 13:30:46 -04:00
Virtually Nick
adfa371a06
GUACAMOLE-1239: Remove Environment binding from SSO base class.
2024-10-04 06:39:57 -04:00
Mike Jumper
02138fb208
GUACAMOLE-1239: Merge support for configuring username case-insensitivity.
2024-10-02 09:24:37 -07:00
Virtually Nick
116f709454
GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity.
2024-10-02 09:23:27 -04:00
Virtually Nick
4d5101574a
GUACAMOLE-1239: Make identifier comparison case-insensitive.
2024-10-02 09:23:27 -04:00
corentin-soriano
3d0f43b558
GUACAMOLE-1611: Add new French translations.
2024-09-25 19:23:16 +02:00
Mike Jumper
0301a1148a
GUACAMOLE-1006: Merge support for reading any property value as a Collection.
2024-08-30 10:44:51 -07:00
Virtually Nick
9da1289677
GUACAMOLE-1006: Implement Collection support within GuacamoleProperty classes.
2024-08-30 10:58:31 -04:00
Mike Jumper
086802ad2f
GUACAMOLE-1980: Merge client version update to 1.6.0.
2024-08-28 23:02:39 -07:00