Michael Jumper
aee1b13b2b
GUACAMOLE-641: Include KSM extension in vault distribution.
2022-01-22 22:25:04 -08:00
Michael Jumper
62863f8a0b
GUACAMOLE-641: Log possible ambiguous record retrievals at debug level.
2022-01-22 22:25:04 -08:00
Michael Jumper
c5ae027225
GUACAMOLE-641: Add user- and gateway-specific tokens.
2022-01-22 22:25:04 -08:00
Michael Jumper
b655866057
GUACAMOLE-641: Consider existing tokens when injecting tokens from vault.
2022-01-22 22:25:04 -08:00
Michael Jumper
7641fa9222
GUACAMOLE-641: Allow TokenInjecting* implementations to consider values of existing tokens.
2022-01-22 22:25:04 -08:00
Michael Jumper
d2f5596015
GUACAMOLE-641: Automatically provide KEEPER_SERVER_* tokens based on connection parameters.
2022-01-22 22:25:04 -08:00
Michael Jumper
30f24de808
GUACAMOLE-641: Allow vault implementations to automatically provide tokens based on connection parameters (without YAML mapping).
2022-01-22 22:25:04 -08:00
Michael Jumper
d0bd4b52d6
GUACAMOLE-641: Add general service for retrieving data from Keeper records.
2022-01-22 22:25:04 -08:00
Michael Jumper
d0043e34dd
GUACAMOLE-641: Allow token mapping file to not exist.
...
Some tokens may be standardized or specific to the implementation, and
may not need to be defined in YAML.
2022-01-22 22:25:04 -08:00
Michael Jumper
8bedbe746c
GUACAMOLE-641: Add initial draft implementation of KSM vault support for Guacamole.
2022-01-22 22:25:04 -08:00
Michael Jumper
786430612e
GUACAMOLE-641: Canonicalize individual, tokenized components of secret names rather than the whole name.
...
In the event that a secret name is structured, such as the URL-like
notation used by Keeper Secrets Manager, canonicalizing/encoding the
entire name could result in the name itself becoming invalid. Only the
portions that come from tokens should be canonicalized.
2022-01-22 22:25:04 -08:00
Michael Jumper
16cb9ed69b
GUACAMOLE-641: Expand CONNECTION_USERNAME and CONNECTION_HOSTNAME tokens only if corresponding parameters are non-empty.
2022-01-22 22:25:04 -08:00
Michael Jumper
4d3b2a9435
GUACAMOLE-641: Obtain connection hostname and/or username for vault tokens via privileged access, if possible.
2022-01-22 22:25:04 -08:00
Michael Jumper
5aba0cd09d
GUACAMOLE-641: Read token/secret mapping from YAML instead of JSON.
2022-01-22 22:25:04 -08:00
Michael Jumper
b57578ad8e
GUACAMOLE-641: Rename vault-specific username token to "USERNAME" to avoid confusion with "GUAC_USERNAME".
...
The "GUAC_USERNAME" token provided by the webapp is based off the
username provided by the user when they authenticated. The username
token provided by the vault extensions uses the username stored with
the user's corresponding object, which may not be the same.
2022-01-22 22:25:04 -08:00
Michael Jumper
f99b3a3213
GUACAMOLE-641: Rename guacamole-auth-vault to guacamole-vault (does not provide auth).
2022-01-22 22:25:04 -08:00
Michael Jumper
2df24bf911
GUACAMOLE-641: Document return type of VaultUserContext.resolve().
2022-01-22 22:25:04 -08:00
Michael Jumper
0359aa6225
GUACAMOLE-641: Follow widely-accepted public static final Logger idiom.
...
From https://github.com/apache/guacamole-client/pull/336#discussion_r241549475 :
>
> SLF4J formerly recommended that instance variables be used
> (non-static), but no longer takes either stance:
> https://www.slf4j.org/faq.html#declared_static
>
> If we have to pick something to be the standard going forward, I'd
> say let's stick with the accepted idiom of `private static final`
> loggers, with the exception being where it's actually necessary to
> not be `static` (dependency injection).
>
2022-01-22 22:25:04 -08:00
Michael Jumper
e0fce54056
GUACAMOLE-641: Correct typo in documentation - "AzureKeyVaultAuthenticationiProviderModule" should be "AzureKeyVaultAuthenticationProviderModule".
2022-01-22 22:25:04 -08:00
Michael Jumper
3dbb821baf
GUACAMOLE-641: Retrieve tokens asynchronously and in parallel.
2022-01-22 22:25:04 -08:00
Michael Jumper
2f946d962b
GUACAMOLE-641: Allow tokens to be easily injected on-demand.
2022-01-22 22:25:04 -08:00
Michael Jumper
e56becc258
GUACAMOLE-641: Retrieve secrets from Azure Key Vault.
2022-01-22 22:25:04 -08:00
Michael Jumper
cab29bacf7
GUACAMOLE-641: Automatically cache requests for secrets from the vault.
2022-01-22 22:25:04 -08:00
Michael Jumper
6145a79f5d
GUACAMOLE-641: Add generic vault support with an initial Azure Key Vault implementation.
2022-01-22 22:25:04 -08:00
Michael Jumper
0ac67b8cf8
GUACAMOLE-641: Provide strict filtering mode for TokenFilter which disallows undefined tokens.
2022-01-22 22:25:04 -08:00
Michael Jumper
19920eeed1
GUACAMOLE-641: Allow token retrieval/generation to fail with an error.
2022-01-22 22:25:04 -08:00
Mike Jumper
1b3361e006
GUACAMOLE-1394: Merge support for setting OpenID groups claim type in Docker image.
2022-01-03 22:01:14 -08:00
Mike Jumper
6a9cd798bf
GUACAMOLE-1275: Merge correction to user home page permission check.
2022-01-03 21:09:29 -08:00
Virtually Nick
70f73cd47d
GUACAMOLE-1394: Add support for setting OpenID groups claim type in Docker.
2022-01-03 12:43:17 -05:00
Virtually Nick
5a7909a1fc
GUACAMOLE-1275: Use effective permissions for determining user home page.
2022-01-03 11:56:08 -05:00
Virtually Nick
aa99b4bc8a
GUACAMOLE-957: Merge add license information for SnakeYAML version required by updated Jackson.
2021-12-27 13:03:50 -07:00
Michael Jumper
c8ffbbdbab
GUACAMOLE-957: Add license information for SnakeYAML version required by updated Jackson.
2021-12-27 10:56:27 -08:00
Virtually Nick
20eec4bbb0
Merge 1.4.0 changes back to master.
2021-12-27 09:32:39 -05:00
Virtually Nick
52d10b2ba0
GUACAMOLE-773: Merge latest update of Java and JavaScript dependencies.
2021-12-27 07:18:17 -07:00
Michael Jumper
d8ce01318e
GUACAMOLE-773: Update JavaScript dependencies to latest stable, compatible versions.
2021-12-26 17:50:43 -08:00
Michael Jumper
b8d23962d6
GUACAMOLE-773: Update Java dependencies to latest stable, compatible versions.
2021-12-26 17:50:43 -08:00
Virtually Nick
881d203080
GUACAMOLE-1418: Merge add support of SQLServer JDBC plugin to Docker build
2021-12-26 08:37:32 -07:00
Virtually Nick
2d269a129d
Merge 1.4.0 changes back to master.
2021-12-26 10:32:55 -05:00
Virtually Nick
0a0cecd24c
GUACAMOLE-1364: Merge correct rendering of SSO provider list during invalid login animation.
2021-12-26 08:31:28 -07:00
Michael Jumper
f1e9ee6876
GUACAMOLE-1364: Correct rendering of SSO provider list during invalid login animation.
...
The SSO provider list unexpectedly shrinks when the invalid login
"shake" animation plays due to the use of "display: table-row" vs. the
login form's own use of "display: table-cell". Migrating the SSO
provider list to a simple absolutely-positioned div corrects this and
matches the way the Guacamole version is rendered.
2021-12-26 00:00:38 -08:00
jbpaux
42f753bda8
GUACAMOLE-1418: update SQL Server driver to 9.4.1
2021-12-25 22:40:26 +01:00
jbpaux
c6eeeab560
GUACAMOLE-1418: fix missing space
2021-12-25 22:36:17 +01:00
Virtually Nick
e64013059d
Merge 1.4.0 changes back to master.
2021-12-25 10:20:06 -05:00
Virtually Nick
014d692567
GUACAMOLE-478: Merge add parameter definition and translations for "normalize-clipboard".
2021-12-25 09:51:47 -05:00
Michael Jumper
b66c964848
GUACAMOLE-478: Add parameter definition and translations for "normalize-clipboard".
2021-12-25 00:48:25 -08:00
Michael Jumper
841b659a20
Merge 1.4.0 changes back to master.
2021-12-24 14:52:16 -08:00
Mike Jumper
5de1063302
GUACAMOLE-1261: Merge correction to handling of generated settings URLs.
2021-12-24 14:51:49 -08:00
jbpaux
c04af737b4
GUACAMOLE-1418: Make use of secrets files clearer
2021-12-24 17:13:23 +01:00
Virtually Nick
f34477f90e
GUACAMOLE-1261: Escape strings used to generate URLs for user, groups, and connections.
2021-12-23 16:38:44 -05:00
Virtually Nick
a543db56e2
Merge 1.4.0 changes back to master.
2021-12-19 18:35:32 -05:00
