safebox/guacamole-client
4
0
Fork 0
mirror of https://github.com/gyurix1968/guacamole-client.git synced 2025-10-31 09:03:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,786 Commits 1 Branch 0 Tags
3b8be53d25c1eb123a83ae56a487cd1d0c604641
Commit Graph

6786 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Jumper
1cfd2ee835 GUACAMOLE-641: Index records by username ONLY if not related to a hostname. 
Doing otherwise would mean that a particular user would never be able
to be associated with a specific password/key by their username if they
have any explicit server-specific account.
 2022-01-22 22:25:05 -08:00
Michael Jumper
87b26fe2c8 GUACAMOLE-641: Use record service to resolve hostname/username of records for later lookup. 2022-01-22 22:25:04 -08:00
Michael Jumper
55b7e6f867 GUACAMOLE-641: Additionally match against KSM custom fields based on labels. 2022-01-22 22:25:04 -08:00
Michael Jumper
f8f0779d7a GUACAMOLE-641: Manually extract password value from KeeperRecord. 
Simply calling getPassword() does not currently work correctly, as the
implementation of getPassword() assumes there will be at least one
value if the field is present. This results in an
ArrayIndexOutOfBoundsException for records with empty passwords:

java.lang.IndexOutOfBoundsException: Index: 0, Size: 0
 at java.util.ArrayList.rangeCheck(ArrayList.java:659)
 at java.util.ArrayList.get(ArrayList.java:435)
 at com.keepersecurity.secretsManager.core.KeeperRecord.getPassword(SecretsManager.kt:134)
 ...
 2022-01-22 22:25:04 -08:00
Michael Jumper
b6e6800c0d GUACAMOLE-641: Consider null token mapping (blank YAML) to be empty. 2022-01-22 22:25:04 -08:00
Michael Jumper
aee1b13b2b GUACAMOLE-641: Include KSM extension in vault distribution. 2022-01-22 22:25:04 -08:00
Michael Jumper
62863f8a0b GUACAMOLE-641: Log possible ambiguous record retrievals at debug level. 2022-01-22 22:25:04 -08:00
Michael Jumper
c5ae027225 GUACAMOLE-641: Add user- and gateway-specific tokens. 2022-01-22 22:25:04 -08:00
Michael Jumper
b655866057 GUACAMOLE-641: Consider existing tokens when injecting tokens from vault. 2022-01-22 22:25:04 -08:00
Michael Jumper
7641fa9222 GUACAMOLE-641: Allow TokenInjecting* implementations to consider values of existing tokens. 2022-01-22 22:25:04 -08:00
Michael Jumper
d2f5596015 GUACAMOLE-641: Automatically provide KEEPER_SERVER_* tokens based on connection parameters. 2022-01-22 22:25:04 -08:00
Michael Jumper
30f24de808 GUACAMOLE-641: Allow vault implementations to automatically provide tokens based on connection parameters (without YAML mapping). 2022-01-22 22:25:04 -08:00
Michael Jumper
d0bd4b52d6 GUACAMOLE-641: Add general service for retrieving data from Keeper records. 2022-01-22 22:25:04 -08:00
Michael Jumper
d0043e34dd GUACAMOLE-641: Allow token mapping file to not exist. 
Some tokens may be standardized or specific to the implementation, and
may not need to be defined in YAML.
 2022-01-22 22:25:04 -08:00
Michael Jumper
8bedbe746c GUACAMOLE-641: Add initial draft implementation of KSM vault support for Guacamole. 2022-01-22 22:25:04 -08:00
Michael Jumper
786430612e GUACAMOLE-641: Canonicalize individual, tokenized components of secret names rather than the whole name. 
In the event that a secret name is structured, such as the URL-like
notation used by Keeper Secrets Manager, canonicalizing/encoding the
entire name could result in the name itself becoming invalid. Only the
portions that come from tokens should be canonicalized.
 2022-01-22 22:25:04 -08:00
Michael Jumper
16cb9ed69b GUACAMOLE-641: Expand CONNECTION_USERNAME and CONNECTION_HOSTNAME tokens only if corresponding parameters are non-empty. 2022-01-22 22:25:04 -08:00
Michael Jumper
4d3b2a9435 GUACAMOLE-641: Obtain connection hostname and/or username for vault tokens via privileged access, if possible. 2022-01-22 22:25:04 -08:00
Michael Jumper
5aba0cd09d GUACAMOLE-641: Read token/secret mapping from YAML instead of JSON. 2022-01-22 22:25:04 -08:00
Michael Jumper
b57578ad8e GUACAMOLE-641: Rename vault-specific username token to "USERNAME" to avoid confusion with "GUAC_USERNAME". 
The "GUAC_USERNAME" token provided by the webapp is based off the
username provided by the user when they authenticated. The username
token provided by the vault extensions uses the username stored with
the user's corresponding object, which may not be the same.
 2022-01-22 22:25:04 -08:00
Michael Jumper
f99b3a3213 GUACAMOLE-641: Rename guacamole-auth-vault to guacamole-vault (does not provide auth). 2022-01-22 22:25:04 -08:00
Michael Jumper
2df24bf911 GUACAMOLE-641: Document return type of VaultUserContext.resolve(). 2022-01-22 22:25:04 -08:00
Michael Jumper
0359aa6225 GUACAMOLE-641: Follow widely-accepted public static final Logger idiom. 
From https://github.com/apache/guacamole-client/pull/336#discussion_r241549475:

>
> SLF4J formerly recommended that instance variables be used
> (non-static), but no longer takes either stance:
> https://www.slf4j.org/faq.html#declared_static
>
> If we have to pick something to be the standard going forward, I'd
> say let's stick with the accepted idiom of `private static final`
> loggers, with the exception being where it's actually necessary to
> not be `static` (dependency injection).
>
 2022-01-22 22:25:04 -08:00
Michael Jumper
e0fce54056 GUACAMOLE-641: Correct typo in documentation - "AzureKeyVaultAuthenticationiProviderModule" should be "AzureKeyVaultAuthenticationProviderModule". 2022-01-22 22:25:04 -08:00
Michael Jumper
3dbb821baf GUACAMOLE-641: Retrieve tokens asynchronously and in parallel. 2022-01-22 22:25:04 -08:00
Michael Jumper
2f946d962b GUACAMOLE-641: Allow tokens to be easily injected on-demand. 2022-01-22 22:25:04 -08:00
Michael Jumper
e56becc258 GUACAMOLE-641: Retrieve secrets from Azure Key Vault. 2022-01-22 22:25:04 -08:00
Michael Jumper
cab29bacf7 GUACAMOLE-641: Automatically cache requests for secrets from the vault. 2022-01-22 22:25:04 -08:00
Michael Jumper
6145a79f5d GUACAMOLE-641: Add generic vault support with an initial Azure Key Vault implementation. 2022-01-22 22:25:04 -08:00
Michael Jumper
0ac67b8cf8 GUACAMOLE-641: Provide strict filtering mode for TokenFilter which disallows undefined tokens. 2022-01-22 22:25:04 -08:00
Michael Jumper
19920eeed1 GUACAMOLE-641: Allow token retrieval/generation to fail with an error. 2022-01-22 22:25:04 -08:00
Michael Jumper
60008bb4f0 GUACAMOLE-1511: Automatically trim whitespace from property values. 2022-01-21 08:10:56 -08:00
Michael Jumper
27c4935e36 GUACAMOLE-1508: Automatically delete temporary files on webapp shutdown. 2022-01-20 16:03:17 -08:00
Michael Jumper
3fb309bbcf GUACAMOLE-1508: Bundle libraries for all extensions as nested .jar files. 2022-01-20 16:03:17 -08:00
Michael Jumper
6548d00da5 GUACAMOLE-1508: Add support for bundling libraries within extensions as nested .jar files. 2022-01-20 16:03:17 -08:00
mtannertdev
e05f7c9fbd GUACAMOLE-1507: Enable configuration of of the 'extension-priority' parameter via environment variable 
Enable configuration of of the 'extension-priority' parameter via environment variable.

Details: https://issues.apache.org/jira/browse/GUACAMOLE-1507
 2022-01-20 02:07:34 -05:00
ClassicGOD
c719fae196 GUACAMOLE-1495: add pl-pl-qwerty to server-layout 2022-01-10 20:38:18 +01:00
Mike Jumper
1b3361e006 GUACAMOLE-1394: Merge support for setting OpenID groups claim type in Docker image. 2022-01-03 22:01:14 -08:00
Mike Jumper
6a9cd798bf GUACAMOLE-1275: Merge correction to user home page permission check. 2022-01-03 21:09:29 -08:00
Virtually Nick
c2c3428cf0 GUACAMOLE-1488: Add support for configuring LDAP SSL protocol. 2022-01-03 15:56:20 -05:00
Virtually Nick
70f73cd47d GUACAMOLE-1394: Add support for setting OpenID groups claim type in Docker. 2022-01-03 12:43:17 -05:00
Virtually Nick
5a7909a1fc GUACAMOLE-1275: Use effective permissions for determining user home page. 2022-01-03 11:56:08 -05:00
Virtually Nick
aa99b4bc8a GUACAMOLE-957: Merge add license information for SnakeYAML version required by updated Jackson. 2021-12-27 13:03:50 -07:00
Michael Jumper
c8ffbbdbab GUACAMOLE-957: Add license information for SnakeYAML version required by updated Jackson. 2021-12-27 10:56:27 -08:00
Virtually Nick
20eec4bbb0 Merge 1.4.0 changes back to master. 2021-12-27 09:32:39 -05:00
Virtually Nick
9fe64a77b8 GUACAMOLE-1402: Use new Client state enum in webapp. 2021-12-27 09:27:07 -05:00
Virtually Nick
52d10b2ba0 GUACAMOLE-773: Merge latest update of Java and JavaScript dependencies. 2021-12-27 07:18:17 -07:00
Michael Jumper
d8ce01318e GUACAMOLE-773: Update JavaScript dependencies to latest stable, compatible versions. 2021-12-26 17:50:43 -08:00
Michael Jumper
b8d23962d6 GUACAMOLE-773: Update Java dependencies to latest stable, compatible versions. 2021-12-26 17:50:43 -08:00
Virtually Nick
881d203080 GUACAMOLE-1418: Merge add support of SQLServer JDBC plugin to Docker build 2021-12-26 08:37:32 -07:00