Commit Graph

6562 Commits

Author SHA1 Message Date
Michael Jumper
7d5ec77adf GUACAMOLE-1756: Clean up assignment of application state. 2023-03-23 00:16:32 -07:00
Michael Jumper
c21ee0f830 GUACAMOLE-1756: Display login failures regardless of whether the interactive login form was used. 2023-03-22 14:08:52 -07:00
Virtually Nick
4dbf35766f GUACAMOLE-1219: Add support for disabling TOTP for specific users and groups. 2023-03-17 13:48:33 -04:00
Virtually Nick
8dc5bebd29 Merge 1.5.1 changes back to master. 2023-03-15 15:01:18 -04:00
Virtually Nick
2f4c9d175a GUACAMOLE-1738: Merge update version of MySQL connector. 2023-03-15 14:52:48 -04:00
Michael Magill
d1cfdd8c9b GUACAMOLE-1738: Update version of MySQL connector
GUACAMOLE-1738 Update version of MySQL connector used to resolve issue 1738 where it can no longer connect to the MySQL server using the new extension and old connector: https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1738
2023-03-15 11:05:00 -07:00
James Muehlner
35cee2f279 GUACAMOLE-839: Merge corrected handling of possible null values within SSL/TLS client auth support. 2023-03-08 10:48:02 -08:00
Michael Jumper
f98901f933 GUACAMOLE-839: Add sanity checks around parsed PEM data, which may indeed be null. 2023-03-08 09:34:52 -08:00
Michael Jumper
6424b063f2 GUACAMOLE-839: Correct WildcardURIGuacamoleProperty to correctly handle missing (null) properties. 2023-03-08 09:34:26 -08:00
Virtually Nick
23a5c9476f GUACAMOLE-839: Merge add webapp SSO support for certificates / smart cards. 2023-03-07 20:59:57 -05:00
Michael Jumper
82073a5976 GUACAMOLE-839: Correct typo in JavaDoc of decode() - "valid", not "value". 2023-03-07 16:38:51 -08:00
Michael Jumper
9f8bb71b0e GUACAMOLE-839: Correct JavaDoc for parameters of getUsername(). 2023-03-07 16:37:00 -08:00
Michael Jumper
d0574f8d82 GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details.
Java's build-in support for reading X.509 certificates does not deal
well with PIV certificates containing the username as a "serialNumber"
attribute. Rather than exposing the string value of that attribute, the
Java implementation exposes a byte array that does not fully match the
string value shown by a tool like OpenSSL.

BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and
provides a predictable means of decoding the certificate.
2023-03-07 16:36:37 -08:00
Mike Jumper
b283341846 GUACAMOLE-1740: Merge corrections to breadth of clipboard editor CSS. 2023-03-07 12:09:25 -08:00
Alex Leitner
f31356c2f5 GUACAMOLE-1740: Prevent collisions of clipboard inactive and active classes with other classes of the same name. 2023-03-07 19:22:03 +00:00
Michael Jumper
b9958fa331 GUACAMOLE-839: Include SSL/TLS auth support within SSO dist archive. 2023-03-05 21:38:30 -08:00
Mike Jumper
a25fa1c982 GUACAMOLE-1730: Merge correction to missing comma in guacamole-history-recording-storage guac-manifest.json. 2023-03-05 19:17:20 -08:00
Virtually Nick
d80d684cd2 GUACAMOLE-1738: Merge update version of MySQL connector 2023-03-03 09:07:24 -05:00
Virtually Nick
e0b59bfcd0 GUACAMOLE-1730: Fix missing comma guacamole-history-recording-storage guac-manifest.json 2023-03-02 19:48:41 -05:00
Michael Magill
632df70162 GUACAMOLE-1738: Update version of MySQL connector
GUACAMOLE-1738 Update version of MySQL connector used to resolve issue 1738 where it can no longer connect to the MySQL server using the new extension and old connector: https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1738
2023-03-01 21:01:30 -05:00
Michael Jumper
0b5b82cc48 GUACAMOLE-839: Allow accepted subject DNs to be restricted via configuration. 2023-03-01 09:10:53 -08:00
Michael Jumper
8255326512 GUACAMOLE-839: Move SSL/TLS client auth logic to separate service. 2023-03-01 09:10:53 -08:00
Michael Jumper
38f1360dec GUACAMOLE-839: Ensure SSL/TLS client auth failures are reflected in the Guacamole UI. 2023-03-01 09:10:53 -08:00
Michael Jumper
b6ce477625 GUACAMOLE-839: Support deferred retrieval of authentication parameters. 2023-03-01 09:10:52 -08:00
Michael Jumper
9177cac3cc GUACAMOLE-839: Allow authenticationService to affect login screen even if not invoked by login screen. 2023-03-01 09:10:52 -08:00
Michael Jumper
e2a6947ff6 GUACAMOLE-839: Implement base support for SSO using SSL/TLS authentication (certificates / smart cards). 2023-03-01 09:10:52 -08:00
Michael Jumper
6bf0b8cf63 GUACAMOLE-839: Allow testing of null nonce values. 2023-03-01 09:10:52 -08:00
Michael Jumper
2e8cf82234 GUACAMOLE-839: As with NonceService, ensure each auth session manager instance has its own context and will not validate the sessions of other session managers. 2023-03-01 09:10:52 -08:00
Michael Jumper
e51d548995 GUACAMOLE-839: Ensure each NonceService instance has its own context (will not validate the nonces of other contexts). 2023-03-01 09:10:52 -08:00
Michael Jumper
841190df5a GUACAMOLE-839: Generate case-insensitive nonce values that can safely be used in domains. 2023-03-01 09:10:52 -08:00
Michael Jumper
f2c7d746ea GUACAMOLE-839: Move authentication session management service to internal common SSO library. 2023-03-01 09:10:52 -08:00
Michael Jumper
1015df6b47 GUACAMOLE-839: Move nonce-generation service to internal common SSO library. 2023-03-01 09:10:52 -08:00
James Muehlner
e9d8618cc8 GUACAMOLE-1744: Merge fix to clean up UI only if user is not logged in. 2023-02-28 11:46:10 -08:00
Michael Jumper
5b8170eee4 GUACAMOLE-1744: Clean up UI only if user is not logged in. 2023-02-28 11:01:42 -08:00
James Muehlner
4308bc1389 GUACAMOLE-1740: Merge change hiding clipboard contents in sidebar until explicitly focused. 2023-02-27 15:33:21 -08:00
Alex Leitner
2c15f3d21f GUACAMOLE-1740: Don't display clipboard contents in the clipboard editor until it is focused on. 2023-02-27 23:25:27 +00:00
Virtually Nick
9caf5c530f GUACAMOLE-1744: Merge automatically clean up UI if session has expired in the background. 2023-02-27 17:56:18 -05:00
Michael Jumper
d10c35396e GUACAMOLE-1744: Automatically reset UI if session is no longer valid. 2023-02-27 14:53:09 -08:00
Michael Jumper
f61f016fdf GUACAMOLE-1744: Provide REST API mechanism for testing session validity.
NOTE: This test must not have the effect of resetting a session's last
accessed time, or periodic validity tests will erroneously act as
session keep-alives.
2023-02-27 14:53:09 -08:00
Virtually Nick
21cee643c7 GUACAMOLE-1745: Merge ensure deep copies of session storage are created only if necessary. 2023-02-27 17:51:54 -05:00
Michael Jumper
cfffcdf0b7 GUACAMOLE-1745: Ensure deep copies of session storage are created only if necessary. 2023-02-27 14:44:46 -08:00
Virtually Nick
78c084be65 GUACAMOLE-1733: Merge add missing optional configuration options for Docker startup 2023-02-17 14:02:35 -05:00
Ronan SALMON
c9a7c7bae4 GUACAMOLE-1733: Add missing optional configuration options from docker start.sh script 2023-02-17 15:06:48 +01:00
Mike Jumper
72b0634a5f GUACAMOLE-1730: Merge Polish translation. 2023-02-04 13:08:30 -08:00
James Muehlner
180c045ad9 Merge 1.5.0 changes back to master. 2023-02-04 00:55:20 +00:00
James Muehlner
3ad32215a9 GUACAMOLE-1293: Merge user count UI improvements for anonymous users. 2023-02-03 16:54:30 -08:00
Mike Jumper
309350a909 GUACAMOLE-1293: Display anonymous users within a shared session as "Anonymous". 2023-02-03 16:37:19 -08:00
Virtually Nick
2f30b6aad6 Merge 1.5.0 changes back to master. 2023-02-03 14:31:12 -05:00
Virtually Nick
9193b37ed9 GUACAMOLE-1293: Merge add list/count of current users joined to a connection. 2023-02-03 14:29:50 -05:00
Mike Jumper
bd91327415 GUACAMOLE-1293: Allow "onmsg" to determine whether "onjoin" and "onleave" fire. 2023-01-31 15:27:00 -08:00