Michael Jumper
08e5938493
GUACAMOLE-839: Redirect user to proper URI for SSL/TLS client auth (rather than just refuse).
2023-03-28 13:36:15 -07:00
James Muehlner
41f65b02f7
GUACAMOLE-1219: Merge support for disabling TOTP on a user or user group basis.
2023-03-28 09:29:07 -07:00
Victor Cleaner
0db69594cd
GUACAMOLE-1758: Updated czech translation
...
GUACAMOLE-1758: Updated czech translation
2023-03-24 18:52:51 +01:00
James Muehlner
b3b75eeb0b
GUACAMOLE-1757: Merge fix for duplicated SSO provider list.
2023-03-23 12:56:23 -07:00
Michael Jumper
e6449d2c57
GUACAMOLE-1757: Ensure SSO provider list is added to login UI only once.
2023-03-23 12:30:58 -07:00
James Muehlner
baf3e84c6a
GUACAMOLE-1756: Merge login failure UI for when no interactive login form was used.
2023-03-23 09:57:03 -07:00
Michael Jumper
7d5ec77adf
GUACAMOLE-1756: Clean up assignment of application state.
2023-03-23 00:16:32 -07:00
Michael Jumper
c21ee0f830
GUACAMOLE-1756: Display login failures regardless of whether the interactive login form was used.
2023-03-22 14:08:52 -07:00
Virtually Nick
4dbf35766f
GUACAMOLE-1219: Add support for disabling TOTP for specific users and groups.
2023-03-17 13:48:33 -04:00
Virtually Nick
8dc5bebd29
Merge 1.5.1 changes back to master.
2023-03-15 15:01:18 -04:00
Virtually Nick
2f4c9d175a
GUACAMOLE-1738: Merge update version of MySQL connector.
2023-03-15 14:52:48 -04:00
Michael Magill
d1cfdd8c9b
GUACAMOLE-1738: Update version of MySQL connector
...
GUACAMOLE-1738 Update version of MySQL connector used to resolve issue 1738 where it can no longer connect to the MySQL server using the new extension and old connector: https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1738
2023-03-15 11:05:00 -07:00
James Muehlner
35cee2f279
GUACAMOLE-839: Merge corrected handling of possible null values within SSL/TLS client auth support.
2023-03-08 10:48:02 -08:00
Michael Jumper
f98901f933
GUACAMOLE-839: Add sanity checks around parsed PEM data, which may indeed be null.
2023-03-08 09:34:52 -08:00
Michael Jumper
6424b063f2
GUACAMOLE-839: Correct WildcardURIGuacamoleProperty to correctly handle missing (null) properties.
2023-03-08 09:34:26 -08:00
Virtually Nick
23a5c9476f
GUACAMOLE-839: Merge add webapp SSO support for certificates / smart cards.
2023-03-07 20:59:57 -05:00
Michael Jumper
82073a5976
GUACAMOLE-839: Correct typo in JavaDoc of decode() - "valid", not "value".
2023-03-07 16:38:51 -08:00
Michael Jumper
9f8bb71b0e
GUACAMOLE-839: Correct JavaDoc for parameters of getUsername().
2023-03-07 16:37:00 -08:00
Michael Jumper
d0574f8d82
GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details.
...
Java's build-in support for reading X.509 certificates does not deal
well with PIV certificates containing the username as a "serialNumber"
attribute. Rather than exposing the string value of that attribute, the
Java implementation exposes a byte array that does not fully match the
string value shown by a tool like OpenSSL.
BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and
provides a predictable means of decoding the certificate.
2023-03-07 16:36:37 -08:00
Mike Jumper
b283341846
GUACAMOLE-1740: Merge corrections to breadth of clipboard editor CSS.
2023-03-07 12:09:25 -08:00
Alex Leitner
f31356c2f5
GUACAMOLE-1740: Prevent collisions of clipboard inactive and active classes with other classes of the same name.
2023-03-07 19:22:03 +00:00
Michael Jumper
b9958fa331
GUACAMOLE-839: Include SSL/TLS auth support within SSO dist archive.
2023-03-05 21:38:30 -08:00
Mike Jumper
a25fa1c982
GUACAMOLE-1730: Merge correction to missing comma in guacamole-history-recording-storage guac-manifest.json.
2023-03-05 19:17:20 -08:00
Virtually Nick
d80d684cd2
GUACAMOLE-1738: Merge update version of MySQL connector
2023-03-03 09:07:24 -05:00
Virtually Nick
e0b59bfcd0
GUACAMOLE-1730: Fix missing comma guacamole-history-recording-storage guac-manifest.json
2023-03-02 19:48:41 -05:00
Michael Magill
632df70162
GUACAMOLE-1738: Update version of MySQL connector
...
GUACAMOLE-1738 Update version of MySQL connector used to resolve issue 1738 where it can no longer connect to the MySQL server using the new extension and old connector: https://issues.apache.org/jira/projects/GUACAMOLE/issues/GUACAMOLE-1738
2023-03-01 21:01:30 -05:00
Michael Jumper
0b5b82cc48
GUACAMOLE-839: Allow accepted subject DNs to be restricted via configuration.
2023-03-01 09:10:53 -08:00
Michael Jumper
8255326512
GUACAMOLE-839: Move SSL/TLS client auth logic to separate service.
2023-03-01 09:10:53 -08:00
Michael Jumper
38f1360dec
GUACAMOLE-839: Ensure SSL/TLS client auth failures are reflected in the Guacamole UI.
2023-03-01 09:10:53 -08:00
Michael Jumper
b6ce477625
GUACAMOLE-839: Support deferred retrieval of authentication parameters.
2023-03-01 09:10:52 -08:00
Michael Jumper
9177cac3cc
GUACAMOLE-839: Allow authenticationService to affect login screen even if not invoked by login screen.
2023-03-01 09:10:52 -08:00
Michael Jumper
e2a6947ff6
GUACAMOLE-839: Implement base support for SSO using SSL/TLS authentication (certificates / smart cards).
2023-03-01 09:10:52 -08:00
Michael Jumper
6bf0b8cf63
GUACAMOLE-839: Allow testing of null nonce values.
2023-03-01 09:10:52 -08:00
Michael Jumper
2e8cf82234
GUACAMOLE-839: As with NonceService, ensure each auth session manager instance has its own context and will not validate the sessions of other session managers.
2023-03-01 09:10:52 -08:00
Michael Jumper
e51d548995
GUACAMOLE-839: Ensure each NonceService instance has its own context (will not validate the nonces of other contexts).
2023-03-01 09:10:52 -08:00
Michael Jumper
841190df5a
GUACAMOLE-839: Generate case-insensitive nonce values that can safely be used in domains.
2023-03-01 09:10:52 -08:00
Michael Jumper
f2c7d746ea
GUACAMOLE-839: Move authentication session management service to internal common SSO library.
2023-03-01 09:10:52 -08:00
Michael Jumper
1015df6b47
GUACAMOLE-839: Move nonce-generation service to internal common SSO library.
2023-03-01 09:10:52 -08:00
James Muehlner
e9d8618cc8
GUACAMOLE-1744: Merge fix to clean up UI only if user is not logged in.
2023-02-28 11:46:10 -08:00
Michael Jumper
5b8170eee4
GUACAMOLE-1744: Clean up UI only if user is not logged in.
2023-02-28 11:01:42 -08:00
James Muehlner
4308bc1389
GUACAMOLE-1740: Merge change hiding clipboard contents in sidebar until explicitly focused.
2023-02-27 15:33:21 -08:00
Alex Leitner
2c15f3d21f
GUACAMOLE-1740: Don't display clipboard contents in the clipboard editor until it is focused on.
2023-02-27 23:25:27 +00:00
Virtually Nick
9caf5c530f
GUACAMOLE-1744: Merge automatically clean up UI if session has expired in the background.
2023-02-27 17:56:18 -05:00
Michael Jumper
d10c35396e
GUACAMOLE-1744: Automatically reset UI if session is no longer valid.
2023-02-27 14:53:09 -08:00
Michael Jumper
f61f016fdf
GUACAMOLE-1744: Provide REST API mechanism for testing session validity.
...
NOTE: This test must not have the effect of resetting a session's last
accessed time, or periodic validity tests will erroneously act as
session keep-alives.
2023-02-27 14:53:09 -08:00
Virtually Nick
21cee643c7
GUACAMOLE-1745: Merge ensure deep copies of session storage are created only if necessary.
2023-02-27 17:51:54 -05:00
Michael Jumper
cfffcdf0b7
GUACAMOLE-1745: Ensure deep copies of session storage are created only if necessary.
2023-02-27 14:44:46 -08:00
Virtually Nick
78c084be65
GUACAMOLE-1733: Merge add missing optional configuration options for Docker startup
2023-02-17 14:02:35 -05:00
Ronan SALMON
c9a7c7bae4
GUACAMOLE-1733: Add missing optional configuration options from docker start.sh script
2023-02-17 15:06:48 +01:00
Mike Jumper
72b0634a5f
GUACAMOLE-1730: Merge Polish translation.
2023-02-04 13:08:30 -08:00