Commit Graph

6394 Commits

Author SHA1 Message Date
Michael Jumper
d0574f8d82 GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details.
Java's build-in support for reading X.509 certificates does not deal
well with PIV certificates containing the username as a "serialNumber"
attribute. Rather than exposing the string value of that attribute, the
Java implementation exposes a byte array that does not fully match the
string value shown by a tool like OpenSSL.

BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and
provides a predictable means of decoding the certificate.
2023-03-07 16:36:37 -08:00
Mike Jumper
b283341846 GUACAMOLE-1740: Merge corrections to breadth of clipboard editor CSS. 2023-03-07 12:09:25 -08:00
Alex Leitner
f31356c2f5 GUACAMOLE-1740: Prevent collisions of clipboard inactive and active classes with other classes of the same name. 2023-03-07 19:22:03 +00:00
Michael Jumper
b9958fa331 GUACAMOLE-839: Include SSL/TLS auth support within SSO dist archive. 2023-03-05 21:38:30 -08:00
Mike Jumper
a25fa1c982 GUACAMOLE-1730: Merge correction to missing comma in guacamole-history-recording-storage guac-manifest.json. 2023-03-05 19:17:20 -08:00
Virtually Nick
d80d684cd2 GUACAMOLE-1738: Merge update version of MySQL connector 2023-03-03 09:07:24 -05:00
Virtually Nick
e0b59bfcd0 GUACAMOLE-1730: Fix missing comma guacamole-history-recording-storage guac-manifest.json 2023-03-02 19:48:41 -05:00
Michael Magill
632df70162 GUACAMOLE-1738: Update version of MySQL connector
GUACAMOLE-1738 Update version of MySQL connector used to resolve issue 1738 where it can no longer connect to the MySQL server using the new extension and old connector: https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1738
2023-03-01 21:01:30 -05:00
Michael Jumper
0b5b82cc48 GUACAMOLE-839: Allow accepted subject DNs to be restricted via configuration. 2023-03-01 09:10:53 -08:00
Michael Jumper
8255326512 GUACAMOLE-839: Move SSL/TLS client auth logic to separate service. 2023-03-01 09:10:53 -08:00
Michael Jumper
38f1360dec GUACAMOLE-839: Ensure SSL/TLS client auth failures are reflected in the Guacamole UI. 2023-03-01 09:10:53 -08:00
Michael Jumper
b6ce477625 GUACAMOLE-839: Support deferred retrieval of authentication parameters. 2023-03-01 09:10:52 -08:00
Michael Jumper
9177cac3cc GUACAMOLE-839: Allow authenticationService to affect login screen even if not invoked by login screen. 2023-03-01 09:10:52 -08:00
Michael Jumper
e2a6947ff6 GUACAMOLE-839: Implement base support for SSO using SSL/TLS authentication (certificates / smart cards). 2023-03-01 09:10:52 -08:00
Michael Jumper
6bf0b8cf63 GUACAMOLE-839: Allow testing of null nonce values. 2023-03-01 09:10:52 -08:00
Michael Jumper
2e8cf82234 GUACAMOLE-839: As with NonceService, ensure each auth session manager instance has its own context and will not validate the sessions of other session managers. 2023-03-01 09:10:52 -08:00
Michael Jumper
e51d548995 GUACAMOLE-839: Ensure each NonceService instance has its own context (will not validate the nonces of other contexts). 2023-03-01 09:10:52 -08:00
Michael Jumper
841190df5a GUACAMOLE-839: Generate case-insensitive nonce values that can safely be used in domains. 2023-03-01 09:10:52 -08:00
Michael Jumper
f2c7d746ea GUACAMOLE-839: Move authentication session management service to internal common SSO library. 2023-03-01 09:10:52 -08:00
Michael Jumper
1015df6b47 GUACAMOLE-839: Move nonce-generation service to internal common SSO library. 2023-03-01 09:10:52 -08:00
James Muehlner
e9d8618cc8 GUACAMOLE-1744: Merge fix to clean up UI only if user is not logged in. 2023-02-28 11:46:10 -08:00
Michael Jumper
5b8170eee4 GUACAMOLE-1744: Clean up UI only if user is not logged in. 2023-02-28 11:01:42 -08:00
James Muehlner
4308bc1389 GUACAMOLE-1740: Merge change hiding clipboard contents in sidebar until explicitly focused. 2023-02-27 15:33:21 -08:00
Alex Leitner
2c15f3d21f GUACAMOLE-1740: Don't display clipboard contents in the clipboard editor until it is focused on. 2023-02-27 23:25:27 +00:00
Virtually Nick
9caf5c530f GUACAMOLE-1744: Merge automatically clean up UI if session has expired in the background. 2023-02-27 17:56:18 -05:00
Michael Jumper
d10c35396e GUACAMOLE-1744: Automatically reset UI if session is no longer valid. 2023-02-27 14:53:09 -08:00
Michael Jumper
f61f016fdf GUACAMOLE-1744: Provide REST API mechanism for testing session validity.
NOTE: This test must not have the effect of resetting a session's last
accessed time, or periodic validity tests will erroneously act as
session keep-alives.
2023-02-27 14:53:09 -08:00
Virtually Nick
21cee643c7 GUACAMOLE-1745: Merge ensure deep copies of session storage are created only if necessary. 2023-02-27 17:51:54 -05:00
Michael Jumper
cfffcdf0b7 GUACAMOLE-1745: Ensure deep copies of session storage are created only if necessary. 2023-02-27 14:44:46 -08:00
Virtually Nick
78c084be65 GUACAMOLE-1733: Merge add missing optional configuration options for Docker startup 2023-02-17 14:02:35 -05:00
Ronan SALMON
c9a7c7bae4 GUACAMOLE-1733: Add missing optional configuration options from docker start.sh script 2023-02-17 15:06:48 +01:00
Mike Jumper
72b0634a5f GUACAMOLE-1730: Merge Polish translation. 2023-02-04 13:08:30 -08:00
James Muehlner
180c045ad9 Merge 1.5.0 changes back to master. 2023-02-04 00:55:20 +00:00
James Muehlner
3ad32215a9 GUACAMOLE-1293: Merge user count UI improvements for anonymous users. 2023-02-03 16:54:30 -08:00
Mike Jumper
309350a909 GUACAMOLE-1293: Display anonymous users within a shared session as "Anonymous". 2023-02-03 16:37:19 -08:00
Virtually Nick
2f30b6aad6 Merge 1.5.0 changes back to master. 2023-02-03 14:31:12 -05:00
Virtually Nick
9193b37ed9 GUACAMOLE-1293: Merge add list/count of current users joined to a connection. 2023-02-03 14:29:50 -05:00
Mike Jumper
bd91327415 GUACAMOLE-1293: Allow "onmsg" to determine whether "onjoin" and "onleave" fire. 2023-01-31 15:27:00 -08:00
Mike Jumper
b7e3f73ffa GUACAMOLE-1293: Clarify message parameter mapping with variable naming. 2023-01-30 12:07:50 -08:00
Mike Jumper
c45c529522 GUACAMOLE-1293: Display user count and join/leave notifications in out-of-the-way status indicator. 2023-01-30 10:16:22 -08:00
Mike Jumper
a0d5824e83 GUACAMOLE-1293: Add "onjoin" and "onleave" events as alternative to handling low-level "msg" instructions directly. 2023-01-30 10:16:22 -08:00
Mike Jumper
250039aaf9 GUACAMOLE-1293: Replace message list with overall shared user count. 2023-01-30 10:16:22 -08:00
Mike Jumper
f194ca6367 Merge 1.5.0 changes back to master. 2023-01-22 09:33:31 -08:00
Mike Jumper
9a587a16eb GUACAMOLE-1322: Merge correction to SAML sanity-checking logic regarding SAML_IDP_URL. 2023-01-22 09:32:17 -08:00
Virtually Nick
8acde27aec GUACAMOLE-1322: Add SAML_IDP_URL as required for Docker container absent a metadata file. 2023-01-14 21:48:38 -05:00
James Muehlner
44d53a21b0 GUACAMOLE-1731: Merge parent project version bump to 1.5.0 for extensions. 2023-01-11 09:10:15 -08:00
Mike Jumper
56b4cc436d GUACAMOLE-1731: Correct parent project version (bumped to 1.5.0). 2023-01-10 23:30:47 -08:00
Mike Jumper
0614861578 Merge 1.5.0 changes back to master. 2023-01-10 21:59:48 -08:00
Mike Jumper
28ae0a9331 GUACAMOLE-1293: Merge client support for join/leave notifications. 2023-01-10 21:59:14 -08:00
Mike Jumper
9f176ed489 Merge 1.5.0 changes back to master. 2023-01-10 21:52:26 -08:00