Michael Jumper
29b56ff3cf
GUACAMOLE-839: Ensure plus signs in received encoded certificates are not decoded as spaces.
...
The Apache HTTPD implementation of URL escaping does not encode plus
signs, which Java's URLDecoder will decode as spaces. To avoid mangling
received certificates, we need to ensure any plus signs within received
certificates are preserved even if not encoded.
2025-04-23 11:31:10 -07:00
Michael Jumper
0103b27547
GUACAMOLE-839: Ensure all SSO and related mechanisms set Credentials username.
...
This is necessary to ensure the ${GUAC_USERNAME} token is properly
substituted in cases where SSO and SSO-like auth methods are used.
2025-04-14 23:35:34 -07:00
Virtually Nick
b9f43cd8f0
GUACAMOLE-2052: Merge maintain independent copy of request details in Credentials.
2025-04-14 22:19:05 -04:00
Michael Jumper
4670ad0b90
GUACAMOLE-2052: Maintain independent copy of request details in Credentials.
2025-04-14 18:45:04 -07:00
Virtually Nick
5c3ddb4f00
GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth.
2025-04-10 06:27:46 -04:00
Michael Jumper
91d47fea58
GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header.
...
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
2025-04-10 01:25:57 -07:00
Michael Jumper
0f80d0ddf2
GUACAMOLE-839: Fix check for lack of request headers (may be null).
2025-04-10 01:24:01 -07:00
Michael Jumper
95dc96cf33
GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl").
...
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.
The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
2025-04-08 11:25:29 -07:00
Michael Jumper
bcdb62fbe7
GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9).
2025-03-04 02:41:37 -08:00
Michael Jumper
51afe5ade8
GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0).
2025-03-04 02:31:02 -08:00
Michael Jumper
78990d97dd
GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80).
2025-03-04 02:31:02 -08:00
Michael Jumper
2df43bce9c
GUACAMOLE-1956: Update Java dependencies to latest compatible.
2025-01-02 15:55:36 -08:00
Michael Jumper
ce98043c16
GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible.
2025-01-01 21:03:04 -08:00
Virtually Nick
ddd09969d8
GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration.
2024-10-31 13:30:46 -04:00
Virtually Nick
adfa371a06
GUACAMOLE-1239: Remove Environment binding from SSO base class.
2024-10-04 06:39:57 -04:00
Mike Jumper
02138fb208
GUACAMOLE-1239: Merge support for configuring username case-insensitivity.
2024-10-02 09:24:37 -07:00
Virtually Nick
116f709454
GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity.
2024-10-02 09:23:27 -04:00
Virtually Nick
4d5101574a
GUACAMOLE-1239: Make identifier comparison case-insensitive.
2024-10-02 09:23:27 -04:00
corentin-soriano
3d0f43b558
GUACAMOLE-1611: Add new French translations.
2024-09-25 19:23:16 +02:00
Mike Jumper
0301a1148a
GUACAMOLE-1006: Merge support for reading any property value as a Collection.
2024-08-30 10:44:51 -07:00
Virtually Nick
9da1289677
GUACAMOLE-1006: Implement Collection support within GuacamoleProperty classes.
2024-08-30 10:58:31 -04:00
Mike Jumper
086802ad2f
GUACAMOLE-1980: Merge client version update to 1.6.0.
2024-08-28 23:02:39 -07:00
James Muehlner
929f6c7f6d
GUACAMOLE-1980: Update client versions to 1.6.0.
2024-08-29 00:16:00 +00:00
Alex Leitner
68a0d22d2a
GUACAMOLE-1956: Bring Java and JavaScript dependencies up to date.
2024-08-21 14:39:54 -04:00
James Muehlner
ea7c5ef18e
GUACAMOLE-1956: Switch guacamole-auth-sso-ssl to updated version of bc-fips.
2024-06-11 18:43:38 +00:00
Michael Jumper
284353da48
Merge changes from patch branch back to main.
2024-06-11 11:19:52 -07:00
James Muehlner
429d96888e
GUACAMOLE-1956: Update maven dependencies to latest compatible versions.
2024-06-11 17:27:37 +00:00
Virtually Nick
13494baa4a
GUACAMOLE-1289: Move AuthenticationSession components to guacamole-exit.
2024-03-29 00:57:40 +00:00
Michael Jumper
5a43d494f2
Merge patch changes back to main.
2024-03-13 15:27:32 -07:00
James Muehlner
8e5cf7ab1b
GUACAMOLE-1905: Revert Apache Santuario version for compatibility with reverted Woodstox version.
2024-03-13 21:53:04 +00:00
Virtually Nick
ecec7bc305
Merge 1.5.5 changes back to main.
2024-03-12 17:48:21 -04:00
Virtually Nick
325c97aed8
GUACAMOLE-1905: Merge revert to java-saml-compatible version of woodstox.
2024-03-12 17:45:46 -04:00
James Muehlner
dc016e4b9f
GUACAMOLE-1905: Upgrade to jose4j 0.9.6.
2024-03-12 21:20:49 +00:00
James Muehlner
35195069e6
GUACAMOLE-1905: Revert to java-saml-compatible version of woodstox.
2024-03-12 21:14:52 +00:00
Virtually Nick
5843c67704
Merge 1.5.5 changes back to main.
2024-03-09 15:05:19 -05:00
Virtually Nick
fddcdd39f9
GUACAMOLE-1905: Update Java dependencies to latest compatible versions.
2024-03-03 16:16:46 -05:00
mildis
8c42553564
GUACAMOLE-1844 : OIDC JWT claims as user token
...
GUACAMOLE-1844 : OIDC JWT claims as user token
This patch allows IDP to send JWT claims that can be mapped to user tokens, prefixed with OIDC_.
Same case transormation apply than LDAP_ and CAS_.
Define openid-attributes-claim-type with a comma-separated list of claims that should be mapped.
Multivalued JWT claims are not unrolled.
2024-02-13 21:38:48 +01:00
Virtually Nick
46db5f249d
GUACAMOLE-1915: Bump versions for projects outside the 1.5.5 scope.
2024-01-30 12:37:45 -05:00
James Muehlner
c2697fa4ab
Merge 1.5.5 changes back to master.
2024-01-30 17:16:16 +00:00
Virtually Nick
4119304913
GUACAMOLE-1906: Bump guac-manifest versions and add 1.5.5 to the extension loader.
2024-01-29 21:53:33 -05:00
James Muehlner
a0b2d1f1b1
Merge 1.5.5 changes back to master.
2024-01-29 22:14:15 +00:00
Virtually Nick
ff20c8db08
GUACAMOLE-1906: Bump version numbers to 1.5.5.
2024-01-26 20:32:29 -05:00
James Muehlner
212955c16c
Merge 1.5.4 changes back to master.
2023-12-04 17:23:53 +00:00
Mike Jumper
dbbe238cb4
GUACAMOLE-1859: Update to Apache Directory API v2.1.5.
2023-12-03 15:35:24 -08:00
Mike Jumper
1b11b31045
GUACAMOLE-1859: Update xmlsec to 2.2.6 (transitive dependency of SAML).
2023-12-01 11:05:56 -08:00
Virtually Nick
b02f30935a
GUACAMOLE-1612: Merge updates to Italian translations
2023-12-01 06:40:54 -05:00
Mike Jumper
4d162810f7
GUACAMOLE-1887: Bump versions numbers of projects outside 1.5.4 scope.
2023-11-23 08:18:35 -08:00
Virtually Nick
9d2649c0fa
Merge 1.5.4 changes back to master.
2023-11-22 17:34:44 -05:00
Mike Jumper
90ea156625
GUACAMOLE-1886: Bump version numbers to 1.5.4.
2023-11-22 12:55:32 -08:00
Mike Jumper
ed31d6f2e0
GUACAMOLE-839: Force usage of non-dynamic version of Bouncy Castle FIPS.
2023-10-06 12:17:15 -07:00