adam/guacamole-client
1
0 Fork 0
Code Issues Pull Requests 1 Packages Releases Wiki Activity
6,971 Commits 6 Branches 0 Tags
5691bdcb2e4286679fc8a7d924f2b4c1ca422b73
Commit Graph
1804 Commits
Author SHA1 Message Date
David Bateman 5691bdcb2e No body in JsonUrlReader for GET method 2026-04-20 14:39:26 +01:00
David Bateman fbb5ee07cb Replace use of java.net.HttpURLConnection with jav.net.http.HttpClient, make the outboud url connection asynchronous 2026-04-20 14:39:26 +01:00
David Bateman 053d41c44c Print detected OIDC well-known information at debug-level equals info 2026-04-20 14:39:26 +01:00
David Bateman 2021fbc75f Remove some no longer used imports for TokenValidationService 2026-04-20 14:39:26 +01:00
David Bateman a8c04d0d2f Treat review comments 2026-04-20 14:39:26 +01:00
David Bateman e4b75c9ea4 - Add openid-well-known-endpoint and treat it to automatically find the : 
* issuer,
  * authorization_endpoint,
  * token_endpoint,
  * jwks_uri
- Replace openid-flow-type with openid-response-type
- Use an Enum for openid-response-type to limit to the values 'id_token',
  'token' or 'cod'
- Treat the response type as an implicit flow type allowing use of AWS
  Cognito
 2026-04-20 14:39:26 +01:00
David Bateman d12d7e559e Remove accidentally committed files 2026-04-20 14:39:26 +01:00
David Bateman b79fed5bcf Minor white-spece, import changes to minimize impact on existing code 2026-04-20 14:39:26 +01:00
David Bateman 41ad6e68b5 Reinclude accidentally removed check if implicit token is null 2026-04-20 14:39:26 +01:00
David Bateman 319a1bc1e8 Use SessionManager directly from getLoginURI to store PKCE removing the need for local REST redirect and callback function 2026-04-20 14:38:09 +01:00
David Bateman 6a3543a8a3 Add code flow authorisation type, with or without a client secret and with or without pkce 2026-04-20 14:38:03 +01:00
Michael Jumper 651bb5df8c GUACAMOLE-2088: Correct typo in MySQL reference to method name ("case", not "caes"). 2026-04-20 14:19:23 +01:00
Michael Jumper 7534ddfef9 GUACAMOLE-2088: Add missing "AND" for MySQL/MariaDB "DELETE" query. 2026-04-20 14:19:19 +01:00
Michael Jumper 9534601d3b GUACAMOLE-1956: Update Duo SDK to latest compatible (1.3.1). 2025-05-02 09:24:11 -07:00
Michael Jumper 29b56ff3cf GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces. 
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
 2025-04-23 11:31:10 -07:00
Michael Jumper 0103b27547 GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username. 
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
 2025-04-14 23:35:34 -07:00
Virtually Nick b9f43cd8f0 GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials. 2025-04-14 22:19:05 -04:00
Michael Jumper 4670ad0b90 GUACAMOLE-2052: Maintain independent copy of request details in Credentials. 2025-04-14 18:45:04 -07:00
Virtually Nick 5c3ddb4f00 GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth. 2025-04-10 06:27:46 -04:00
Michael Jumper 91d47fea58 GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header. 
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
 2025-04-10 01:25:57 -07:00
Michael Jumper 0f80d0ddf2 GUACAMOLE-839: Fix check for lack of request headers (may be null). 2025-04-10 01:24:01 -07:00
Michael Jumper 95dc96cf33 GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl"). 
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.

The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
 2025-04-08 11:25:29 -07:00
Michael Jumper 14aadfbc7a GUACAMOLE-1956: Update MINA to latest compatible (v2.2.4). 2025-03-04 02:41:37 -08:00
Michael Jumper 405cf34d63 GUACAMOLE-1956: Update MyBatis to latest compatible (v3.5.15). 2025-03-04 02:41:37 -08:00
Michael Jumper bcdb62fbe7 GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9). 2025-03-04 02:41:37 -08:00
Michael Jumper 51afe5ade8 GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0). 2025-03-04 02:31:02 -08:00
Michael Jumper 78990d97dd GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80). 2025-03-04 02:31:02 -08:00
Michael Jumper eb608366b7 GUACAMOLE-1956: Update to latest release of KSM Java SDK (v17.0.0). 2025-03-03 00:13:56 -08:00
Virtually Nick 0460352401 GUACAMOLE-1956: Merge (re-)update to latest compatible dependencies. 2025-01-02 22:03:06 -05:00
Michael Jumper 2df43bce9c GUACAMOLE-1956: Update Java dependencies to latest compatible. 2025-01-02 15:55:36 -08:00
Michael Jumper 88487bc536 GUACAMOLE-1239: Fix RADIUS extension build (ConfigurationService should have been removed). 2025-01-01 21:13:24 -08:00
Michael Jumper ce98043c16 GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible. 2025-01-01 21:03:04 -08:00
Michael Jumper 16ab520664 GUACAMOLE-1239: Refactor away need for isCaseSensitive() function of Identifiable. 2024-11-27 11:35:12 -08:00
Virtually Nick f314e78c7c GUACAMOLE-1239: Add case-sensitivity configuration for UserGroup objects and remove per-extension configuration. 2024-11-09 09:24:14 -05:00
Virtually Nick cdc4524751 GUACAMOLE-1239: Correct query error in UserPermissionMapper. 2024-11-03 07:40:07 -05:00
Virtually Nick ddd09969d8 GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration. 2024-10-31 13:30:46 -04:00
Virtually Nick 240dcd9a52 GUACAMOLE-1239: JDBC module should pull case-sensitivity from authentcated user when possible. 2024-10-27 22:29:12 -04:00
Virtually Nick 2c5414aee2 GUACAMOLE-1239: Fix issue with records added by non-JDBC connections. 2024-10-18 07:25:33 -04:00
Virtually Nick 61f6c8ceb1 GUACAMOLE-1239: Add case-sensitivity settings to permissions mappers and services. 2024-10-12 16:19:56 -04:00
Virtually Nick 76d37b4071 GUACAMOLE-1239: Move caseSensitive parameter to the base mapper classes. 2024-10-11 14:10:31 -04:00
Virtually Nick 3d86026cb1 GUACAMOLE-1239: Make sure case sensitivity warnings are only displayed at startup. 2024-10-11 12:38:26 -04:00
Virtually Nick b2f74a6829 GUACAMOLE-1239: Correct spelling of parameter annotations for caseSensitive parameters. 2024-10-10 07:46:45 -04:00
Mike Jumper 71f26e966f GUACAMOLE-1239: Merge removal of duplicated Environment binding in SSO extensions. 2024-10-04 11:03:40 -07:00
Virtually Nick 06786ff565 GUACAMOLE-1020: Relocate HostName conversion and clean up formatting. 2024-10-04 06:52:59 -04:00
Virtually Nick adfa371a06 GUACAMOLE-1239: Remove Environment binding from SSO base class. 2024-10-04 06:39:57 -04:00
Mike Jumper 02138fb208 GUACAMOLE-1239: Merge support for configuring username case-insensitivity. 2024-10-02 09:24:37 -07:00
Virtually Nick 116f709454 GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity. 2024-10-02 09:23:27 -04:00
Virtually Nick 4d5101574a GUACAMOLE-1239: Make identifier comparison case-insensitive. 2024-10-02 09:23:27 -04:00
Virtually Nick 95cd386791 GUACAMOLE-1020: Make sure only admin users can modify restrictions. 2024-10-01 21:16:05 -04:00
Virtually Nick 1e04d6d366 GUACAMOLE-1020: Pull effective group membership from the AuthenticatedUser object. 2024-09-28 07:57:24 -04:00