adam/guacamole-client
1
0 Fork 0
Code Issues Pull Requests 1 Packages Releases Wiki Activity
6,971 Commits 6 Branches 0 Tags
5691bdcb2e4286679fc8a7d924f2b4c1ca422b73
Commit Graph
117 Commits
Author SHA1 Message Date
David Bateman 5691bdcb2e No body in JsonUrlReader for GET method 2026-04-20 14:39:26 +01:00
David Bateman fbb5ee07cb Replace use of java.net.HttpURLConnection with jav.net.http.HttpClient, make the outboud url connection asynchronous 2026-04-20 14:39:26 +01:00
David Bateman 053d41c44c Print detected OIDC well-known information at debug-level equals info 2026-04-20 14:39:26 +01:00
David Bateman 2021fbc75f Remove some no longer used imports for TokenValidationService 2026-04-20 14:39:26 +01:00
David Bateman a8c04d0d2f Treat review comments 2026-04-20 14:39:26 +01:00
David Bateman e4b75c9ea4 - Add openid-well-known-endpoint and treat it to automatically find the : 
* issuer,
  * authorization_endpoint,
  * token_endpoint,
  * jwks_uri
- Replace openid-flow-type with openid-response-type
- Use an Enum for openid-response-type to limit to the values 'id_token',
  'token' or 'cod'
- Treat the response type as an implicit flow type allowing use of AWS
  Cognito
 2026-04-20 14:39:26 +01:00
David Bateman d12d7e559e Remove accidentally committed files 2026-04-20 14:39:26 +01:00
David Bateman b79fed5bcf Minor white-spece, import changes to minimize impact on existing code 2026-04-20 14:39:26 +01:00
David Bateman 41ad6e68b5 Reinclude accidentally removed check if implicit token is null 2026-04-20 14:39:26 +01:00
David Bateman 319a1bc1e8 Use SessionManager directly from getLoginURI to store PKCE removing the need for local REST redirect and callback function 2026-04-20 14:38:09 +01:00
David Bateman 6a3543a8a3 Add code flow authorisation type, with or without a client secret and with or without pkce 2026-04-20 14:38:03 +01:00
Michael Jumper 29b56ff3cf GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces. 
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
 2025-04-23 11:31:10 -07:00
Michael Jumper 0103b27547 GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username. 
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
 2025-04-14 23:35:34 -07:00
Virtually Nick b9f43cd8f0 GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials. 2025-04-14 22:19:05 -04:00
Michael Jumper 4670ad0b90 GUACAMOLE-2052: Maintain independent copy of request details in Credentials. 2025-04-14 18:45:04 -07:00
Virtually Nick 5c3ddb4f00 GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth. 2025-04-10 06:27:46 -04:00
Michael Jumper 91d47fea58 GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header. 
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
 2025-04-10 01:25:57 -07:00
Michael Jumper 0f80d0ddf2 GUACAMOLE-839: Fix check for lack of request headers (may be null). 2025-04-10 01:24:01 -07:00
Michael Jumper 95dc96cf33 GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl"). 
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.

The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
 2025-04-08 11:25:29 -07:00
Michael Jumper bcdb62fbe7 GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9). 2025-03-04 02:41:37 -08:00
Michael Jumper 51afe5ade8 GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0). 2025-03-04 02:31:02 -08:00
Michael Jumper 78990d97dd GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80). 2025-03-04 02:31:02 -08:00
Michael Jumper 2df43bce9c GUACAMOLE-1956: Update Java dependencies to latest compatible. 2025-01-02 15:55:36 -08:00
Michael Jumper ce98043c16 GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible. 2025-01-01 21:03:04 -08:00
Virtually Nick ddd09969d8 GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration. 2024-10-31 13:30:46 -04:00
Virtually Nick adfa371a06 GUACAMOLE-1239: Remove Environment binding from SSO base class. 2024-10-04 06:39:57 -04:00
Mike Jumper 02138fb208 GUACAMOLE-1239: Merge support for configuring username case-insensitivity. 2024-10-02 09:24:37 -07:00
Virtually Nick 116f709454 GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity. 2024-10-02 09:23:27 -04:00
Virtually Nick 4d5101574a GUACAMOLE-1239: Make identifier comparison case-insensitive. 2024-10-02 09:23:27 -04:00
corentin-soriano 3d0f43b558 GUACAMOLE-1611: Add new French translations. 2024-09-25 19:23:16 +02:00
Mike Jumper 0301a1148a GUACAMOLE-1006: Merge support for reading any property value as a Collection. 2024-08-30 10:44:51 -07:00
Virtually Nick 9da1289677 GUACAMOLE-1006: Implement Collection support within GuacamoleProperty classes. 2024-08-30 10:58:31 -04:00
Mike Jumper 086802ad2f GUACAMOLE-1980: Merge client version update to 1.6.0. 2024-08-28 23:02:39 -07:00
James Muehlner 929f6c7f6d GUACAMOLE-1980: Update client versions to 1.6.0. 2024-08-29 00:16:00 +00:00
Alex Leitner 68a0d22d2a GUACAMOLE-1956: Bring Java and JavaScript dependencies up to date. 2024-08-21 14:39:54 -04:00
James Muehlner ea7c5ef18e GUACAMOLE-1956: Switch guacamole-auth-sso-ssl to updated version of bc-fips. 2024-06-11 18:43:38 +00:00
Michael Jumper 284353da48 Merge changes from patch branch back to main. 2024-06-11 11:19:52 -07:00
James Muehlner 429d96888e GUACAMOLE-1956: Update maven dependencies to latest compatible versions. 2024-06-11 17:27:37 +00:00
Virtually Nick 13494baa4a GUACAMOLE-1289: Move AuthenticationSession components to guacamole-exit. 2024-03-29 00:57:40 +00:00
Michael Jumper 5a43d494f2 Merge patch changes back to main. 2024-03-13 15:27:32 -07:00
James Muehlner 8e5cf7ab1b GUACAMOLE-1905: Revert Apache Santuario version for compatibility with reverted Woodstox version. 2024-03-13 21:53:04 +00:00
Virtually Nick ecec7bc305 Merge 1.5.5 changes back to main. 2024-03-12 17:48:21 -04:00
Virtually Nick 325c97aed8 GUACAMOLE-1905: Merge revert to java-saml-compatible version of woodstox. 2024-03-12 17:45:46 -04:00
James Muehlner dc016e4b9f GUACAMOLE-1905: Upgrade to jose4j 0.9.6. 2024-03-12 21:20:49 +00:00
James Muehlner 35195069e6 GUACAMOLE-1905: Revert to java-saml-compatible version of woodstox. 2024-03-12 21:14:52 +00:00
Virtually Nick 5843c67704 Merge 1.5.5 changes back to main. 2024-03-09 15:05:19 -05:00
Virtually Nick fddcdd39f9 GUACAMOLE-1905: Update Java dependencies to latest compatible versions. 2024-03-03 16:16:46 -05:00
mildis 8c42553564 GUACAMOLE-1844 : OIDC JWT claims as user token 
GUACAMOLE-1844 : OIDC JWT claims as user token

This patch allows IDP to send JWT claims that can be mapped to user tokens, prefixed with OIDC_.
Same case transormation apply than LDAP_ and CAS_.

Define openid-attributes-claim-type with a comma-separated list of claims that should be mapped.

Multivalued JWT claims are not unrolled.
 2024-02-13 21:38:48 +01:00
Virtually Nick 46db5f249d GUACAMOLE-1915: Bump versions for projects outside the 1.5.5 scope. 2024-01-30 12:37:45 -05:00
James Muehlner c2697fa4ab Merge 1.5.5 changes back to master. 2024-01-30 17:16:16 +00:00