Commit Graph
165 Commits
Author SHA1 Message Date
Michael Jumper 182f204c95 GUACAMOLE-635: Heap pollution is not possible within SimpleDirectory(ObjectType... objects).
From https://docs.oracle.com/javase/tutorial/java/generics/nonReifiableVarargsType.html#vulnerabilities:

"Heap pollution occurs when a variable of a parameterized type refers
to an object that is not of that parameterized type."

In this case, the parameterized type (ObjectType) and the array of that
type within this constructor are always used as their formal types.
2018-09-29 13:19:21 -07:00
Michael Jumper 3492b556c3 GUACAMOLE-220: Add missing definitions for CREATE_USER_GROUP system permission. 2018-09-08 13:09:24 -07:00
Nick Couchman 2ff416bb1c GUACAMOLE-540: Remove unused imports. 2018-06-30 14:31:24 -04:00
Nick Couchman 3d593a4ca1 GUACAMOLE-540: Remove processing of X-Forwarded-For header. 2018-06-30 14:28:53 -04:00
Nick Couchman 0b77782391 GUACAMOLE-540: Fix spaces that get added by IDE 2018-06-16 08:07:33 -04:00
Nick Couchman fb1efec056 GUACAMOLE-540: Restore removed setter methods in Credentials. 2018-06-16 08:06:13 -04:00
Nick Couchman a0d0e07658 GUACAMOLE-540: Clean up style and comments in Credentials class 2018-06-16 08:06:07 -04:00
Nick Couchman 52a3f454e6 GUACAMOLE-540: Clean up Credentials with new constructor. 2018-06-16 08:06:07 -04:00
Nick Couchman c725da00a0 GUACAMOLE-540: Update comments; remove unnecessary setter methods. 2018-06-16 07:13:17 -04:00
Nick Couchman cbd77b52ae GUACAMOLE-540: Move remote address processing to Credentials class for consistency. 2018-06-16 07:13:17 -04:00
Michael Jumper 426a7919b3 GUACAMOLE-470: Allow TEXT fields to be associated with predefined sets of known-good values. 2018-06-12 13:58:04 -07:00
Michael Jumper e75e9715f7 GUACAMOLE-220: Permissions returned by getEffectivePermissions() may BE implied, not "may implied". 2018-04-21 14:25:39 -07:00
Michael Jumper c8564f5d80 GUACAMOLE-220: Correct JavaDoc of getEffectiveUserGroups() - missing period. 2018-04-21 14:24:11 -07:00
Michael Jumper b35e494fdf GUACAMOLE-220: Remove erroneously-added blank line. 2018-04-21 14:23:07 -07:00
Michael Jumper b43aa59958 GUACAMOLE-220: Correct documentation of getUserGroups() behavior. 2018-04-21 14:11:18 -07:00
Michael Jumper dfb07edf29 GUACAMOLE-220: Add base API support for user groups. Refactor as minimally necessary. 2018-04-19 15:29:10 -07:00
Michael Jumper fa100a888f GUACAMOLE-542: Explicitly document the behavior of the default implementations provided by AbstractUserContext and AbstractAuthenticationProvider. 2018-04-12 14:33:32 -07:00
Michael Jumper 57ff8b84e6 GUACAMOLE-542: Deprecate SimpleConnectionDirectory, etc., relying instead on SimpleDirectory. 2018-04-11 21:29:23 -07:00
Michael Jumper 9b7ef0dfcf GUACAMOLE-542: Migrate to simpler AbstractAuthenticationProvider / AbstractUserContext base classes. 2018-04-11 21:29:15 -07:00
Nick Couchman 6ed4dcdeab GUACAMOLE-497: Merge remove usage of function/classes deprecated within Java 9. 2018-02-02 09:52:52 -05:00
Michael Jumper 17f6862d17 GUACAMOLE-495: Remove guacamole-ext's GuacamoleHome and GuacamoleProperties classes, deprecated since 0.9.4 (ff28626). 2018-02-01 22:30:23 -08:00
Michael Jumper 37f7df804d GUACAMOLE-497: Fall back to qualified name of XML element if SAX parser does not provide local name. 2018-02-01 21:21:05 -08:00
Michael Jumper 29f838f63d GUACAMOLE-497: Remove usage of now-deprecated container class constructors. 2018-02-01 19:02:39 -08:00
Michael Jumper fff1411768 GUACAMOLE-96: Extract Attributes interface from objects which provide getAttributes() / setAttributes(). 2018-01-31 15:26:16 -08:00
Michael Jumper 79936c4c41 GUACAMOLE-96: Document semantics of voluntary attribute storage and guaranteed sanitization. 2018-01-31 15:26:16 -08:00
Nick Couchman eaeaeb10cd GUACAMOLE-96: Merge allow extensions to decorate each other's objects. 2018-01-30 14:31:04 -05:00
Michael Jumper 1c99f6a8cf GUACAMOLE-96: Rearrange logic of DecoratingDirectory.get() to make more intuitive sense. 2018-01-17 18:41:36 -08:00
Carl Harris 9691bc0c86 GUACAMOLE-464: fix import statement order and spacing 2018-01-16 12:15:45 -05:00
Carl Harris 718663d2c5 GUACAMOLE-464: use enable-environment-properties as the property name 2018-01-16 11:49:15 -05:00
Michael Jumper 63bb3a033a GUACAMOLE-96: Objects should be decorated upon add(), not undecorated (they by definition come from an external source, not the decorated extension). 2018-01-13 17:23:19 -08:00
Michael Jumper b37e041d3e GUACAMOLE-96: Add convenience classes for overriding the behavior of objects commonly stored in a Directory. 2018-01-13 17:23:15 -08:00
Michael Jumper a915f7b190 GUACAMOLE-96: Add convenience class for decorating the objects returned by a Directory. 2018-01-13 17:23:13 -08:00
Michael Jumper 7357e51b58 GUACAMOLE-96: Add redecorate() function with semantics analogous to updateUserContext(). 2018-01-13 17:23:11 -08:00
Michael Jumper 41059f5e09 GUACAMOLE-96: Add convenience class for overriding the behavior of an existing UserContext. 2018-01-13 17:23:02 -08:00
Michael Jumper ffad1898b6 GUACAMOLE-96: Add API support for augmenting functionality of other extensions. 2018-01-13 17:22:48 -08:00
Carl Harris cc99584802 GUACAMOLE-464: explicitly enable property overrides from environment 2017-12-19 05:22:23 -05:00
Carl Harris 263cbf2331 GUACAMOLE-464: configuration properties from OS environment 2017-12-14 06:14:15 -05:00
Michael Jumper 223102c38c GUACAMOLE-412: Refactor user events with respect to extension API changes since the decoupling of auth from storage, providing AuthenticatedUser instead of UserContext to represent the user involved. 2017-10-27 13:03:17 -07:00
Michael Jumper 153996b725 GUACAMOLE-364: Merge changes restoring extension support for event listeners. 2017-10-06 09:48:33 -07:00
Carl Harris 25705a86e8 GUACAMOLE-364: addressed some documentation stragglers 2017-10-06 10:26:26 -04:00
Carl Harris f8484befaf GUACAMOLE-364: addressed various documentation issues 2017-10-06 10:22:10 -04:00
Nick Couchman 81ffa5c8e1 GUACAMOLE-394: Merge refactor extension API to define user history 2017-09-27 18:14:43 -04:00
Michael Jumper 22bcc1b78e GUACAMOLE-341: Automatically pull GUAC_USERNAME token from AuthenticatedUser's identifier if there is no username provided via Credentials (closes #174). 2017-09-26 12:10:35 -07:00
Michael Jumper 3cd7f453c0 GUACAMOLE-394: Add getLastActive() function, returning the time that a user/connection was last logged-in / used. 2017-09-25 12:50:52 -07:00
Michael Jumper b61f14e4db GUACAMOLE-394: Add history list at User object level (similar to Connection). 2017-09-25 12:49:43 -07:00
Michael Jumper 700005e823 GUACAMOLE-394: Remove UserRecord interface - recording historical auth tokens doesn't make sense, and removing that turns UserRecord into an empty interface. 2017-09-25 12:49:12 -07:00
Michael Jumper 5340f55361 GUACAMOLE-394: Add API support for user login/logout records. 2017-09-25 12:48:37 -07:00
Michael Jumper 26122ebc3e GUACAMOLE-394: Deprecate ConnectionRecordSet. Refactor accordingly. 2017-09-25 12:30:03 -07:00
Michael Jumper cd5d23866d GUACAMOLE-394: Separate definition of records and record sets into generalized interface. 2017-09-25 12:30:03 -07:00
Michael Jumper 2c587e5f9f GUACAMOLE-393: Add AuthenticationProvider shutdown hook. 2017-09-25 11:47:44 -07:00