James Muehlner
8a7bde8e9c
GUACAMOLE-1656: Simplify, clean up, and improve documentation of KSM code.
2022-09-23 23:19:41 +00:00
James Muehlner
165bd413c0
GUACAMOLE-990: Merge change ensuring banning occurs before other auth.
2022-09-12 14:58:46 -07:00
Michael Jumper
719e957be1
GUACAMOLE-990: Guarantee auth banning occurs before all other auth processing.
2022-09-12 09:17:32 -07:00
James Muehlner
dfc7e6dd90
GUACAMOLE-1656: Simplify auto-refresh behavior in JDBC auth provider.
2022-08-26 18:12:23 +00:00
James Muehlner
3790d76fc9
GUACAMOLE-1656: Force refresh the user context on updateUserContext to ensure that any modified user attributes are picked up.
2022-08-26 18:12:21 +00:00
James Muehlner
e882a08486
GUACAMOLE-1656: Ensure the preferences page refreshes on save in case a one-time-token was updated.
2022-08-26 18:11:42 +00:00
James Muehlner
33f2b499ef
GUACAMOLE-1656: Fall back to user KSM config for single value fetch.
2022-08-26 18:11:40 +00:00
James Muehlner
87cd7fbe22
GUACAMOLE-1656: Remove user attributes header; it does not look good.
2022-08-26 18:07:46 +00:00
James Muehlner
e4c65cba19
GUACAMOLE-1656: Add per-user KSM vault functionality.
2022-08-26 18:07:43 +00:00
Mike Jumper
6b03b113a9
GUACAMOLE-1661: Merge support for indexing KSM records by user domain.
2022-08-25 09:07:45 -07:00
James Muehlner
c7bb1cb50c
GUACAMOLE-1661: Parse config only once when iterating records.
2022-08-25 00:03:18 +00:00
James Muehlner
2b997a9992
GUACAMOLE-1661: Restore logic to not index records by login if hostname is already defined.
2022-08-24 19:03:16 +00:00
James Muehlner
e0a9364dde
GUACAMOLE-1661: Simplify and clarify KSM domain search code.
2022-08-24 18:53:21 +00:00
James Muehlner
a99a76568b
GUACAMOLE-990: Merge new guacamole-auth-ban extension to block brute-force auth attempts.
2022-08-22 15:57:33 -07:00
Michael Jumper
2e5d3f4faf
GUACAMOLE-990: Disable tracking if max addresses is not a positive integer.
2022-08-22 15:16:46 -07:00
Michael Jumper
584db45a4f
GUACAMOLE-990: Enabled/disable auth failure tracking via implementations of a common interface.
2022-08-22 15:16:46 -07:00
Michael Jumper
a9ed4c2982
GUACAMOLE-990: Revise guacamole-auth-ban log levels to generally always notify of problematic addresses.
2022-08-22 15:16:46 -07:00
Michael Jumper
8b981d9213
GUACAMOLE-990: Add Docker image support for guacamole-auth-ban.
2022-08-22 15:16:45 -07:00
Michael Jumper
43f65357c8
GUACAMOLE-990: Limit maximum number of tracked addresses.
2022-08-22 15:16:45 -07:00
Michael Jumper
2b19bc95da
GUACAMOLE-990: Use translation string for "too many failed attempts" error.
2022-08-22 15:16:45 -07:00
Michael Jumper
f9d8abcfde
GUACAMOLE-990: Clear out any previous authentication token that is known to be invalid.
2022-08-22 15:16:45 -07:00
James Muehlner
843add93a5
GUACAMOLE-1614: Merge inclusion of chromium-driver in Docker build for JS unit tests.
2022-08-22 14:26:56 -07:00
Michael Jumper
ffb023c6c3
GUACAMOLE-1614: Include chromium-driver in Docker build for sake of JS unit tests.
2022-08-22 11:41:10 -07:00
Michael Jumper
275b5bee13
GUACAMOLE-990: Add extension for automatically blocking brute-force auth attempts.
2022-08-22 09:59:06 -07:00
Michael Jumper
e6a61b7223
GUACAMOLE-990: Fire auth success/failure events only after authentication has absolutely succeeded or failed, including the details of any failure.
...
Previously, these events were fired only after the user's identity had
been determined (or failed to be determined). If we don't wait until
after the user contexts have also been successfully obtained (or failed
to be obtained), then things like MFA will not be taken into account
for auth events.
2022-08-22 09:59:06 -07:00
Michael Jumper
0e5a3cb74f
GUACAMOLE-990: The UserContext passed to redecorate() should NOT be the internal DecoratedUserContext wrapper.
2022-08-18 12:26:55 -07:00
“Vict0rC”
d72acf6f29
GUACAMOLE-1664: Completed Czech translation, minor corrections. Indentation of the text adjusted exactly according to the en.json file.
2022-08-12 13:06:11 +02:00
James Muehlner
593cfaaffe
GUACAMOLE-1661: Match by both user and domain when using KEEPER_USER_ tokens.
2022-08-10 23:49:59 +00:00
James Muehlner
aa06c81f29
GUACAMOLE-1661: Add domain search support for KSM vault extension.
2022-08-10 17:36:44 +00:00
Mike Jumper
6138a51e9d
GUACAMOLE-1320: Merge support for chunked file uploads.
2022-07-29 22:12:29 -07:00
elijahnicpon
a116208a6d
GUACAMOLE-1320: Provide chunked file upload mechanism - update uploadHandler documentation
2022-07-28 19:22:31 -04:00
Mike Jumper
1b6b54502e
GUACAMOLE-1372: Merge support for signed SAML requests.
2022-07-28 12:46:31 -07:00
James Muehlner
b35b4d509f
GUACAMOLE-1372: Modify usage of SAML library to allow signed requests.
2022-07-28 18:28:58 +00:00
Michael Jumper
8cc7e47de2
Merge 1.5.0 changes back to master.
...
Please enter a commit message to explain why this merge is necessary,
2022-07-27 23:51:48 -07:00
Mike Jumper
fed176def6
GUACAMOLE-1005: Merge Docker support for configuring RemoteIPValve.
2022-07-27 23:42:11 -07:00
elijahnicpon
003f7e945a
GUACAMOLE-1320: Provide chunked file upload mechanism - add sendEnd()
2022-07-27 20:26:17 -04:00
elijahnicpon
c9a2fc249e
GUACAMOLE-1320: Provide chunked file upload mechanism
2022-07-27 14:07:48 -04:00
Mike Jumper
4b4490b45a
GUACAMOLE-1629: Merge correction to handling of group cycles in KSM support.
2022-07-26 14:52:10 -07:00
James Muehlner
67b5db77e1
GUACAMOLE-1629: Keep track of iterated identifiers when recursing connection group tree looking for KSM attribute to ensure no infinite loop.
2022-07-26 21:39:07 +00:00
Mike Jumper
5b1d39634e
GUACAMOLE-1643: Merge corrections to connection group KSM config edit behavior.
2022-07-22 08:49:24 -07:00
James Muehlner
d599ad317c
GUACAMOLE-1643: Ensure that the KSM config attribute is always visible for connection groups.
2022-07-21 23:26:25 +00:00
James Muehlner
492dbf48d6
GUACAMOLE-1643: Ensure connection groups with an empty KSM config attribute fall back to the global config.
2022-07-21 23:25:25 +00:00
Mike Jumper
a11b9a9ae4
GUACAMOLE-1643: Merge support for KSM one-time tokens at connection group level.
2022-07-21 12:57:49 -07:00
James Muehlner
b8058e7561
GUACAMOLE-1643: Validate/translate KSM configs and one-time tokens on connection group save.
2022-07-21 17:38:31 +00:00
Mike Jumper
8772207a75
GUACAMOLE-1629: Merge support for vault-specific configuration at the connection group level.
2022-07-07 10:33:42 -07:00
James Muehlner
12832bed88
GUACAMOLE-1629: Use Java 8 compatible collector to append connection group attributes.
2022-07-06 19:06:42 +00:00
James Muehlner
0585ab5e5b
GUACAMOLE-1629: Fix client/cache confusion in comments.
2022-07-06 19:01:33 +00:00
James Muehlner
374f1b5e49
GUACAMOLE-1629: Always include any pre-existing connection group attributes when exposing new ones.
2022-07-06 17:55:36 +00:00
James Muehlner
5b69bf405d
GUACAMOLE-1629: Use TextField for KSM configuration since it's always one line.
2022-07-06 17:31:22 +00:00
Mike Jumper
e348d3f89a
GUACAMOLE-1372: Merge support for signed/encrypted SAML requests.
2022-07-05 14:32:31 -07:00
