David Bateman
5691bdcb2e
No body in JsonUrlReader for GET method
2026-04-20 14:39:26 +01:00
David Bateman
fbb5ee07cb
Replace use of java.net.HttpURLConnection with jav.net.http.HttpClient, make the outboud url connection asynchronous
2026-04-20 14:39:26 +01:00
David Bateman
053d41c44c
Print detected OIDC well-known information at debug-level equals info
2026-04-20 14:39:26 +01:00
David Bateman
2021fbc75f
Remove some no longer used imports for TokenValidationService
2026-04-20 14:39:26 +01:00
David Bateman
a8c04d0d2f
Treat review comments
2026-04-20 14:39:26 +01:00
David Bateman
e4b75c9ea4
- Add openid-well-known-endpoint and treat it to automatically find the :
...
* issuer,
* authorization_endpoint,
* token_endpoint,
* jwks_uri
- Replace openid-flow-type with openid-response-type
- Use an Enum for openid-response-type to limit to the values 'id_token',
'token' or 'cod'
- Treat the response type as an implicit flow type allowing use of AWS
Cognito
2026-04-20 14:39:26 +01:00
David Bateman
d12d7e559e
Remove accidentally committed files
2026-04-20 14:39:26 +01:00
David Bateman
b79fed5bcf
Minor white-spece, import changes to minimize impact on existing code
2026-04-20 14:39:26 +01:00
David Bateman
41ad6e68b5
Reinclude accidentally removed check if implicit token is null
2026-04-20 14:39:26 +01:00
David Bateman
319a1bc1e8
Use SessionManager directly from getLoginURI to store PKCE removing the need for local REST redirect and callback function
2026-04-20 14:38:09 +01:00
David Bateman
6a3543a8a3
Add code flow authorisation type, with or without a client secret and with or without pkce
2026-04-20 14:38:03 +01:00
Michael Jumper
651bb5df8c
GUACAMOLE-2088: Correct typo in MySQL reference to method name ("case", not "caes").
2026-04-20 14:19:23 +01:00
Michael Jumper
7534ddfef9
GUACAMOLE-2088: Add missing "AND" for MySQL/MariaDB "DELETE" query.
2026-04-20 14:19:19 +01:00
Virtually Nick
0537c89cd7
GUACAMOLE-2079: Merge fix keyboard lock/unlock in fullscreen mode.
2025-06-02 12:56:21 -05:00
Corentin SORIANO
8c6e1a1df5
GUACAMOLE-2079: Fix keyboard lock/unlock in fullscreen mode.
2025-06-02 18:15:06 +02:00
Mike Jumper
42473ad2c3
GUACAMOLE-2051: Merge correction to default value delimiters of multi-valued Guacamole properties.
2025-05-29 16:33:47 -07:00
Virtually Nick
63987d84fd
GUACAMOLE-2051: Allow Guacamole properties to be either comma or semi-colon delimited.
2025-05-29 19:03:37 -04:00
Virtually Nick
0db9294153
GUACAMOLE-2076: Merge link contents of GUACAMOLE_HOME subdirectories only if they exist.
2025-05-27 19:02:00 -05:00
Michael Jumper
e87534472b
GUACAMOLE-2076: Link contents of GUACAMOLE_HOME subdirectories only if they exist.
2025-05-27 16:14:48 -07:00
Virtually Nick
ffbee1a460
GUACAMOLE-2065: Merge remove usage of asIterator() for Java 8 compatibility.
2025-05-08 13:21:52 -05:00
Michael Jumper
6840f7cec4
GUACAMOLE-2065: Remove usage of asIterator() (not part of Java 8).
2025-05-07 20:50:10 -07:00
Virtually Nick
1ac97e37d3
GUACAMOLE-1956: Merge update dependencies to latest compatible versions.
2025-05-02 11:50:16 -05:00
Michael Jumper
9534601d3b
GUACAMOLE-1956: Update Duo SDK to latest compatible (1.3.1).
2025-05-02 09:24:11 -07:00
Michael Jumper
604234891f
GUACAMOLE-1956: Update JUnit to latest compatible version (5.12.2).
2025-05-02 09:24:11 -07:00
Michael Jumper
27785d6bbd
GUACAMOLE-1956: Update Jackson to latest compatible version (2.19.0).
2025-05-02 09:24:11 -07:00
Virtually Nick
a4dafe961c
GUACAMOLE-839: Merge ensure plus signs in received encoded certificates are not decoded as spaces.
2025-04-23 14:20:24 -05:00
Michael Jumper
29b56ff3cf
GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces.
...
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
2025-04-23 11:31:10 -07:00
Virtually Nick
e09efe3e6e
GUACAMOLE-839: Merge ensure all SSO and related mechanisms set Credentials username.
2025-04-15 10:53:25 -04:00
Michael Jumper
0103b27547
GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username.
...
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
2025-04-14 23:35:34 -07:00
Virtually Nick
b9f43cd8f0
GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials.
2025-04-14 22:19:05 -04:00
Michael Jumper
4670ad0b90
GUACAMOLE-2052: Maintain independent copy of request details in Credentials.
2025-04-14 18:45:04 -07:00
Virtually Nick
5c3ddb4f00
GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth.
2025-04-10 06:27:46 -04:00
Virtually Nick
f4209bec74
GUACAMOLE-839: Merge check for lack of request headers (may be null).
2025-04-10 06:25:05 -04:00
Michael Jumper
91d47fea58
GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header.
...
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
2025-04-10 01:25:57 -07:00
Michael Jumper
0f80d0ddf2
GUACAMOLE-839: Fix check for lack of request headers (may be null).
2025-04-10 01:24:01 -07:00
Virtually Nick
7d4009f91b
GUACAMOLE-1956: Merge rename SSL client auth properties to use "ssl-auth" prefix.
2025-04-08 16:33:40 -04:00
Michael Jumper
95dc96cf33
GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl").
...
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.
The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
2025-04-08 11:25:29 -07:00
Virtually Nick
8ffa897088
GUACAMOLE-374: Merge restore support and deprecation warning for POSTGRESQL_USER variable.
2025-04-07 13:05:26 -04:00
Michael Jumper
bfae010ad9
GUACAMOLE-374: Restore support and deprecation warning for POSTGRESQL_USER variable.
2025-04-06 17:57:53 -07:00
Virtually Nick
da80543ddf
GUACAMOLE-1956: Merge update to latest compatible versions of Java dependencies.
2025-03-04 14:53:28 -05:00
Michael Jumper
e70e362b6b
GUACAMOLE-1956: Update to latest JUnit.
2025-03-04 02:41:37 -08:00
Michael Jumper
14aadfbc7a
GUACAMOLE-1956: Update MINA to latest compatible (v2.2.4).
2025-03-04 02:41:37 -08:00
Michael Jumper
405cf34d63
GUACAMOLE-1956: Update MyBatis to latest compatible (v3.5.15).
2025-03-04 02:41:37 -08:00
Michael Jumper
bcdb62fbe7
GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9).
2025-03-04 02:41:37 -08:00
Michael Jumper
51afe5ade8
GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0).
2025-03-04 02:31:02 -08:00
Michael Jumper
78990d97dd
GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80).
2025-03-04 02:31:02 -08:00
Michael Jumper
9d08bcf4a9
GUACAMOLE-1956: Update Jackson to latest compatible (v2.18.3).
2025-03-04 02:31:02 -08:00
Michael Jumper
3d0b0543d6
GUACAMOLE-1956: Update SLF4J to latest compatible (v2.0.17).
2025-03-04 02:31:02 -08:00
Michael Jumper
7e3535e7ba
GUACAMOLE-1956: Update to latest release of Logback (v1.3.15).
2025-03-03 00:14:00 -08:00
Michael Jumper
eb608366b7
GUACAMOLE-1956: Update to latest release of KSM Java SDK (v17.0.0).
2025-03-03 00:13:56 -08:00