Commit Graph
1477 Commits
Author SHA1 Message Date
Michael Jumper 5aba0cd09d GUACAMOLE-641: Read token/secret mapping from YAML instead of JSON. 2022-01-22 22:25:04 -08:00
Michael Jumper b57578ad8e GUACAMOLE-641: Rename vault-specific username token to "USERNAME" to avoid confusion with "GUAC_USERNAME".
The "GUAC_USERNAME" token provided by the webapp is based off the
username provided by the user when they authenticated. The username
token provided by the vault extensions uses the username stored with
the user's corresponding object, which may not be the same.
2022-01-22 22:25:04 -08:00
Michael Jumper f99b3a3213 GUACAMOLE-641: Rename guacamole-auth-vault to guacamole-vault (does not provide auth). 2022-01-22 22:25:04 -08:00
Michael Jumper 2df24bf911 GUACAMOLE-641: Document return type of VaultUserContext.resolve(). 2022-01-22 22:25:04 -08:00
Michael Jumper 0359aa6225 GUACAMOLE-641: Follow widely-accepted public static final Logger idiom.
From https://github.com/apache/guacamole-client/pull/336#discussion_r241549475:

>
> SLF4J formerly recommended that instance variables be used
> (non-static), but no longer takes either stance:
> https://www.slf4j.org/faq.html#declared_static
>
> If we have to pick something to be the standard going forward, I'd
> say let's stick with the accepted idiom of `private static final`
> loggers, with the exception being where it's actually necessary to
> not be `static` (dependency injection).
>
2022-01-22 22:25:04 -08:00
Michael Jumper e0fce54056 GUACAMOLE-641: Correct typo in documentation - "AzureKeyVaultAuthenticationiProviderModule" should be "AzureKeyVaultAuthenticationProviderModule". 2022-01-22 22:25:04 -08:00
Michael Jumper 3dbb821baf GUACAMOLE-641: Retrieve tokens asynchronously and in parallel. 2022-01-22 22:25:04 -08:00
Michael Jumper e56becc258 GUACAMOLE-641: Retrieve secrets from Azure Key Vault. 2022-01-22 22:25:04 -08:00
Michael Jumper cab29bacf7 GUACAMOLE-641: Automatically cache requests for secrets from the vault. 2022-01-22 22:25:04 -08:00
Michael Jumper 6145a79f5d GUACAMOLE-641: Add generic vault support with an initial Azure Key Vault implementation. 2022-01-22 22:25:04 -08:00
Virtually Nick 20eec4bbb0 Merge 1.4.0 changes back to master. 2021-12-27 09:32:39 -05:00
Virtually Nick 52d10b2ba0 GUACAMOLE-773: Merge latest update of Java and JavaScript dependencies. 2021-12-27 07:18:17 -07:00
Michael Jumper b8d23962d6 GUACAMOLE-773: Update Java dependencies to latest stable, compatible versions. 2021-12-26 17:50:43 -08:00
Virtually Nick 2d269a129d Merge 1.4.0 changes back to master. 2021-12-26 10:32:55 -05:00
Michael Jumper f1e9ee6876 GUACAMOLE-1364: Correct rendering of SSO provider list during invalid login animation.
The SSO provider list unexpectedly shrinks when the invalid login
"shake" animation plays due to the use of "display: table-row" vs. the
login form's own use of "display: table-cell". Migrating the SSO
provider list to a simple absolutely-positioned div corrects this and
matches the way the Guacamole version is rendered.
2021-12-26 00:00:38 -08:00
Virtually Nick 588915d232 Merge 1.4.0 changes back to master. 2021-12-12 07:25:13 -05:00
Michael Jumper 5e9e215356 GUACAMOLE-1411: Bump version numbers to 1.4.0. 2021-12-11 16:27:00 -08:00
James Muehlner 48a38e7b97 Merge 1.4.0 changes back to master. 2021-12-03 21:23:39 -08:00
Michael Jumper b6696b9dba GUACAMOLE-1364: Extract common SSO resource for IdP redirect. 2021-12-03 21:18:04 -08:00
Michael Jumper 0e9860ecf7 GUACAMOLE-1364: Allow both traditional username/password and SSO. 2021-12-03 20:36:34 -08:00
Michael Jumper 7dc0b3b509 GUACAMOLE-1364: Extract common base SSO classes. 2021-12-03 20:33:32 -08:00
Michael Jumper a6b38bec62 GUACAMOLE-1364: Remove unnecessary separate dist .tar.gz for SSO extensions (now distributed within common .tar.gz). 2021-11-25 19:01:57 -08:00
Michael Jumper ba93d17265 GUACAMOLE-1364: Correct naming of SAML auth field and translation. 2021-11-25 18:44:46 -08:00
Michael Jumper 817f19290d GUACAMOLE-1364: Unify translations of SSO extensions. 2021-11-25 18:44:46 -08:00
Michael Jumper 36a02c1f90 GUACAMOLE-1364: Refactor all SSO extensions beneath common base. 2021-11-25 18:44:46 -08:00
Virtually Nick c143c7cb5c Merge 1.4.0 changes back to master. 2021-11-22 20:22:39 -05:00
Michael Jumper cce63e74c4 GUACAMOLE-1364: Do not rely on Collectors.toUnmodifiableMap() as it is not part of Java 8. 2021-11-22 15:11:40 -08:00
Virtually Nick 09b1508ec7 Merge 1.4.0 changes back to master. 2021-11-22 15:47:15 -05:00
Michael Jumper 76caea0fa8 GUACAMOLE-1364: Actually inject parameter tokens derived from SAML. 2021-11-22 12:30:16 -08:00
Michael Jumper d360d2a9ef GUACAMOLE-1364: Clean up overall logic of SAML authentication flow. 2021-11-22 12:30:16 -08:00
James Muehlner 1c12f9f212 GUACAMOLE-957: Merge bind password field default fix for LDAP. 2021-11-15 19:38:45 -08:00
Michael Jumper bc0b14a7c5 GUACAMOLE-957: Default bind password should be bind password, not DN (correct copypasta). 2021-11-13 17:21:48 -08:00
Michael Jumper 1bec3e76c5 GUACAMOLE-957: Clear out cached ldap-servers.yml if it is deleted. 2021-11-13 17:05:11 -08:00
Michael Jumper a056218950 GUACAMOLE-957: Use guacamole.properties alone for LDAP configuration if ldap-servers.yml is empty. 2021-11-13 16:49:00 -08:00
Tadashi Kanda 23b9d91d6f GUACAMOLE-1453: Reflect of indicate.(minor change) 2021-10-29 00:39:17 +09:00
Tadashi Kanda d722c3a759 GUACAMOLE-1453: Reflect of indicate. 2021-10-28 23:53:13 +09:00
Tadashi Kanda 3b34d2cd73 GUACAMOLE-1453: Enable SSL connection between Guacamole and DB using MaraiDB Connector/J 2021-10-28 11:59:11 +09:00
Jimmy a818aff733 GUACAMOLE-1446: Fixed a typo mistake ("the the") in some java files. 2021-10-26 08:09:12 +03:00
Michael Jumper 00f83145a3 GUACAMOLE-957: Leverage capturing group in user match regex to determine Guacamole LDAP user identities. 2021-10-23 20:19:51 -07:00
Michael Jumper b45fc9b6e5 GUACAMOLE-957: Evaluate default value of LDAP configuration only if provided value is null.
The function supplying the default value may throw a GuacamoleException,
thus the function providing that default should only be invoked when
actually necessary.
2021-10-23 20:19:51 -07:00
Michael Jumper 0f96d5e122 GUACAMOLE-957: Continue to use cached version of LDAP YAML if an error occurs. 2021-10-23 20:19:51 -07:00
Michael Jumper d80ab47c97 GUACAMOLE-957: Use case insensitive matching for LDAP YAML regular expressions by default. 2021-10-23 20:19:51 -07:00
Michael Jumper a216ec902a GUACAMOLE-957: Match any user for LDAP YAML by default. 2021-10-23 20:19:51 -07:00
Michael Jumper 5a757d0418 GUACAMOLE-957: Add support for configuring the general network timeout for LDAP. 2021-10-23 20:19:51 -07:00
Michael Jumper 55437faad0 GUACAMOLE-957: Use guacamole.properties for LDAP YAML defaults. 2021-10-23 20:19:51 -07:00
Michael Jumper 160d29df95 GUACAMOLE-957: Define all default LDAP configuration values in central location. 2021-10-23 20:19:51 -07:00
Michael Jumper f322dc3f3e GUACAMOLE-957: Cache LDAP configuration YAML until modified. 2021-10-23 20:19:51 -07:00
Michael Jumper 0fc7c03d70 GUACAMOLE-957: Allow single-element array values for YAML LDAP configuration to be specified as simple strings. 2021-10-23 20:19:51 -07:00
Michael Jumper 91a057cad9 GUACAMOLE-957: Choose LDAP configurations based on usernames. 2021-10-23 20:19:51 -07:00
Michael Jumper 49a4a6c7a0 GUACAMOLE-957: Support reading multiple LDAP server configurations from "ldap-servers.yml". 2021-10-23 20:19:51 -07:00