Commit Graph
125 Commits
Author SHA1 Message Date
David Bateman 08bcd1f9e8 - Add openid-well-known-endpoint and treat it to automatically find the :
* issuer,
  * authorization_endpoint,
  * token_endpoint,
  * jwks_uri
- Replace openid-flow-type with openid-response-type
- Use an Enum for openid-response-type to limit to the values 'id_token',
  'token' or 'cod'
- Treat the response type as an implicit flow type allowing use of AWS
  Cognito
2026-04-13 15:49:01 +01:00
David Bateman 4dfb4b5c66 Remove accidentally committed files 2026-04-13 15:48:57 +01:00
David Bateman f930e76bfa Minor white-spece, import changes to minimize impact on existing code 2026-04-13 15:48:50 +01:00
David Bateman 5af9d38a7c Reinclude accidentally removed check if implicit token is null 2026-04-13 15:48:45 +01:00
David Bateman 95f9d525ae Use SessionManager directly from getLoginURI to store PKCE removing the need for local REST redirect and callback function 2026-04-13 15:48:38 +01:00
David Bateman 4b5ed08b00 Add code flow authorisation type, with or without a client secret and with or without pkce 2026-04-13 15:48:28 +01:00
Safa Bayar c36ace657d GUACAMOLE-1266 Alphabetical reorder fix of import, and js block 2026-01-31 23:23:13 -05:00
Safa Bayar 8ec4d816c4 GUACAMOLE-1266 Remove local js testing lines in pom 2026-01-30 22:35:05 -05:00
Safa Bayar 7c237334e7 GUACAMOLE-1266 SAML Single Logout 2026-01-26 18:42:12 -05:00
Safa Bayar 4763856847 GUACAMOLE-519: MR code review change to simplify getPostLogoutRedirect 2026-01-25 20:31:37 -05:00
Safa Bayar 903fdebf94 GUACAMOLE-519: fix api endpoint forwarding to use logout address 2026-01-18 20:34:17 -05:00
Safa Bayar 12bcea5c65 GUACAMOLE-519: Javascript fix in module to forward to openid logout endpoint 2026-01-18 08:57:55 -05:00
Safa Bayar d3d1a980da GUACAMOLE-519: Implement Single Logout on OpenID Extension 2026-01-17 22:25:55 -05:00
Michael Jumper 87371e608c GUACAMOLE-2139: Inherit guacamole-client version via "revision" property (supported since Maven 3.5.0). 2025-12-25 14:54:31 -08:00
Michael Jumper 10f606c418 GUACAMOLE-2139: Automatically set expected Guacamole version of extensions in build. 2025-12-24 13:17:05 -08:00
Michael Jumper d5b33778bf GUACAMOLE-2139: Bump version number to 1.6.1. 2025-12-24 12:55:11 -08:00
Virtually Nick 4aa841c4f8 GUACAMOLE-2181: Merge improve readability of logs. 2025-12-12 19:32:46 -06:00
Michael Jumper ea06e01ddd GUACAMOLE-2181: Rely on automatic stack traces for debug-level logs. 2025-12-08 20:24:10 -08:00
Turab Garip 325bc65417 GUACAMOLE-2173: New language strings added and typos fixed for Turkish language 2025-12-05 09:57:03 +03:00
Michael Jumper 29b56ff3cf GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces.
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
2025-04-23 11:31:10 -07:00
Michael Jumper 0103b27547 GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username.
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
2025-04-14 23:35:34 -07:00
Virtually Nick b9f43cd8f0 GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials. 2025-04-14 22:19:05 -04:00
Michael Jumper 4670ad0b90 GUACAMOLE-2052: Maintain independent copy of request details in Credentials. 2025-04-14 18:45:04 -07:00
Virtually Nick 5c3ddb4f00 GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth. 2025-04-10 06:27:46 -04:00
Michael Jumper 91d47fea58 GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header.
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
2025-04-10 01:25:57 -07:00
Michael Jumper 0f80d0ddf2 GUACAMOLE-839: Fix check for lack of request headers (may be null). 2025-04-10 01:24:01 -07:00
Michael Jumper 95dc96cf33 GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl").
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.

The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
2025-04-08 11:25:29 -07:00
Michael Jumper bcdb62fbe7 GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9). 2025-03-04 02:41:37 -08:00
Michael Jumper 51afe5ade8 GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0). 2025-03-04 02:31:02 -08:00
Michael Jumper 78990d97dd GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80). 2025-03-04 02:31:02 -08:00
Michael Jumper 2df43bce9c GUACAMOLE-1956: Update Java dependencies to latest compatible. 2025-01-02 15:55:36 -08:00
Michael Jumper ce98043c16 GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible. 2025-01-01 21:03:04 -08:00
Virtually Nick ddd09969d8 GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration. 2024-10-31 13:30:46 -04:00
Virtually Nick adfa371a06 GUACAMOLE-1239: Remove Environment binding from SSO base class. 2024-10-04 06:39:57 -04:00
Mike Jumper 02138fb208 GUACAMOLE-1239: Merge support for configuring username case-insensitivity. 2024-10-02 09:24:37 -07:00
Virtually Nick 116f709454 GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity. 2024-10-02 09:23:27 -04:00
Virtually Nick 4d5101574a GUACAMOLE-1239: Make identifier comparison case-insensitive. 2024-10-02 09:23:27 -04:00
corentin-soriano 3d0f43b558 GUACAMOLE-1611: Add new French translations. 2024-09-25 19:23:16 +02:00
Mike Jumper 0301a1148a GUACAMOLE-1006: Merge support for reading any property value as a Collection. 2024-08-30 10:44:51 -07:00
Virtually Nick 9da1289677 GUACAMOLE-1006: Implement Collection support within GuacamoleProperty classes. 2024-08-30 10:58:31 -04:00
Mike Jumper 086802ad2f GUACAMOLE-1980: Merge client version update to 1.6.0. 2024-08-28 23:02:39 -07:00
James Muehlner 929f6c7f6d GUACAMOLE-1980: Update client versions to 1.6.0. 2024-08-29 00:16:00 +00:00
Alex Leitner 68a0d22d2a GUACAMOLE-1956: Bring Java and JavaScript dependencies up to date. 2024-08-21 14:39:54 -04:00
James Muehlner ea7c5ef18e GUACAMOLE-1956: Switch guacamole-auth-sso-ssl to updated version of bc-fips. 2024-06-11 18:43:38 +00:00
Michael Jumper 284353da48 Merge changes from patch branch back to main. 2024-06-11 11:19:52 -07:00
James Muehlner 429d96888e GUACAMOLE-1956: Update maven dependencies to latest compatible versions. 2024-06-11 17:27:37 +00:00
Virtually Nick 13494baa4a GUACAMOLE-1289: Move AuthenticationSession components to guacamole-exit. 2024-03-29 00:57:40 +00:00
Michael Jumper 5a43d494f2 Merge patch changes back to main. 2024-03-13 15:27:32 -07:00
James Muehlner 8e5cf7ab1b GUACAMOLE-1905: Revert Apache Santuario version for compatibility with reverted Woodstox version. 2024-03-13 21:53:04 +00:00
Virtually Nick ecec7bc305 Merge 1.5.5 changes back to main. 2024-03-12 17:48:21 -04:00