Commit Graph

1728 Commits

Author SHA1 Message Date
Mike Jumper
f6c2787dc1 GUACAMOLE-1855: Merge configuration options for bypassing MFA based on client address. 2024-08-29 00:16:29 -07:00
Mike Jumper
086802ad2f GUACAMOLE-1980: Merge client version update to 1.6.0. 2024-08-28 23:02:39 -07:00
James Muehlner
929f6c7f6d GUACAMOLE-1980: Update client versions to 1.6.0. 2024-08-29 00:16:00 +00:00
Mike Jumper
addac2a263 GUACAMOLE-1956: Merge updates to Java and JavaScript dependencies. 2024-08-28 11:26:11 -07:00
Alex Leitner
68a0d22d2a GUACAMOLE-1956: Bring Java and JavaScript dependencies up to date. 2024-08-21 14:39:54 -04:00
Virtually Nick
fedda30495 GUACAMOLE-1881: Merge add parameter token containing the domain of LDAP/AD usernames. 2024-08-18 18:03:32 -04:00
Michael Jumper
37d8e5ada9 GUACAMOLE-1881: Remove unnecessary recompilation of static domain extraction regex. 2024-08-02 00:32:42 -07:00
Michael Jumper
b2b1452e11 GUACAMOLE-1881: Decouple domain extraction from whether the extracted domain is used for a token. 2024-08-02 00:32:42 -07:00
Virtually Nick
2ecad02fe1 GUACAMOLE-1855: Use common code for checking for IP in list. 2024-07-29 09:25:00 -04:00
Virtually Nick
614cd550bd GUACAMOLE-1855: Implement bypass and enforcement options in the TOTP module. 2024-07-29 09:25:00 -04:00
Virtually Nick
9139bdef02 GUACAMOLE-1855: Implement bypass and enforcement options in the Duo 2FA module. 2024-07-29 09:25:00 -04:00
Virtually Nick
8d1a9fdf42 GUACAMOLE-1855: Implement property for tracking list of IP Addresses. 2024-07-29 09:25:00 -04:00
Mike Jumper
9a8a5f3318 GUACAMOLE-1479: Merge change to styling of disabled users/groups. 2024-06-21 15:29:36 -07:00
James Muehlner
ea7c5ef18e GUACAMOLE-1956: Switch guacamole-auth-sso-ssl to updated version of bc-fips. 2024-06-11 18:43:38 +00:00
Michael Jumper
284353da48 Merge changes from patch branch back to main. 2024-06-11 11:19:52 -07:00
James Muehlner
429d96888e GUACAMOLE-1956: Update maven dependencies to latest compatible versions. 2024-06-11 17:27:37 +00:00
Michael Jumper
50fdb34540 GUACAMOLE-1881: Remove unnecessary usage of TokenName.canonicalize() to derive static name. 2024-05-15 10:37:06 -07:00
Josna battula
27bbd35a3d GUACAMOLE-1881: Adding new standard token LDAP_DOMAIN by extracting from user credentials 2024-05-15 10:09:20 -07:00
Virtually Nick
3b8be53d25 Merge patch branch changes to main. 2024-05-09 17:13:48 -04:00
Alex Leitner
7317edd17d GUACAMOLE-1948: Provide a comprehensive error message for input exceeding database column. 2024-05-07 08:23:50 +09:00
Michael Jumper
58d6828e17 GUACAMOLE-1289: Remove old license information from before migration to Duo's "Universal Prompt". 2024-05-01 10:24:13 -07:00
Michael Jumper
ee75b01c50 GUACAMOLE-1289: Expiration times for AuthenticationSessionManager are relative, not absolute. 2024-04-26 00:43:51 -07:00
Michael Jumper
ed4c0ab779 GUACAMOLE-1289: Redirect back to Duo in case of unexpected failures or invalid tokens. 2024-04-25 18:43:15 -07:00
Michael Jumper
3859fd2f1c GUACAMOLE-1289: Migrate to minute-granularity timeouts for Duo (default of 5 minutes). 2024-04-25 18:10:48 -07:00
Michael Jumper
23ed76d460 GUACAMOLE-1289: Remove Duo dependency on Spring. Update transitive Duo dependencies to latest compatible. 2024-04-25 18:10:48 -07:00
Michael Jumper
6dd4766da4 GUACAMOLE-1289: Refactor Duo and authentication-resumption changes to instead leverage support for updating/replacing credentials prior to auth. 2024-04-25 18:10:48 -07:00
James Muehlner
45c5afbf1e GUACAMOLE-1946: Disable autofill on TOTP verification code field. 2024-04-19 21:32:59 +00:00
Virtually Nick
462022e3f1 GUACAMOLE-1068: Generate random key at each login if key is unconfirmed. 2024-04-12 23:11:10 -04:00
Alex Leitner
9f1a8e6686 GUACAMOLE-1289: Add new translations and guacamole properties. 2024-04-05 01:28:28 +00:00
Virtually Nick
732a4c5762 GUACAMOLE-1479: Move disabled methods up to new Disableable interface. 2024-04-03 19:33:07 -04:00
Alex Leitner
7c49466c79 GUACAMOLE-1289: Modify the Authentication Service to no longer explicitly compare state query string. 2024-04-03 05:47:48 +00:00
Virtually Nick
61457686e3 GUACAMOLE-1479: Update front-end styles and translations for disabled users and user groups. 2024-04-01 11:24:23 -04:00
Virtually Nick
015117f079 GUACAMOLE-1479: Switch JDBC module to use disabled methods instead of attributes. 2024-04-01 11:24:23 -04:00
Alex Leitner
b0e5ecd33e GUACAMOLE-1289: Handle resumable state for duo authentication. 2024-03-29 01:03:48 +00:00
Virtually Nick
7807bb9c11 GUACMAOLE-1289: Fixup and debugging. 2024-03-29 00:57:41 +00:00
Virtually Nick
e8860e4dd8 GUACAMOLE-1289: Update the Duo extension to the v4 API 2024-03-29 00:57:40 +00:00
Virtually Nick
13494baa4a GUACAMOLE-1289: Move AuthenticationSession components to guacamole-exit. 2024-03-29 00:57:40 +00:00
Virtually Nick
eb31d5e82d Merge patch branch changes to main branch. 2024-03-25 08:42:46 -04:00
Michael Jumper
26e0a97201 GUACAMOLE-1905: Update to latest version of Kotlin (1.9.23). 2024-03-24 14:30:47 -07:00
Michael Jumper
5a43d494f2 Merge patch changes back to main. 2024-03-13 15:27:32 -07:00
James Muehlner
8e5cf7ab1b GUACAMOLE-1905: Revert Apache Santuario version for compatibility with reverted Woodstox version. 2024-03-13 21:53:04 +00:00
Virtually Nick
ecec7bc305 Merge 1.5.5 changes back to main. 2024-03-12 17:48:21 -04:00
Virtually Nick
325c97aed8 GUACAMOLE-1905: Merge revert to java-saml-compatible version of woodstox. 2024-03-12 17:45:46 -04:00
James Muehlner
dc016e4b9f GUACAMOLE-1905: Upgrade to jose4j 0.9.6. 2024-03-12 21:20:49 +00:00
James Muehlner
35195069e6 GUACAMOLE-1905: Revert to java-saml-compatible version of woodstox. 2024-03-12 21:14:52 +00:00
Virtually Nick
5843c67704 Merge 1.5.5 changes back to main. 2024-03-09 15:05:19 -05:00
Virtually Nick
fddcdd39f9 GUACAMOLE-1905: Update Java dependencies to latest compatible versions. 2024-03-03 16:16:46 -05:00
mildis
8c42553564 GUACAMOLE-1844 : OIDC JWT claims as user token
GUACAMOLE-1844 : OIDC JWT claims as user token

This patch allows IDP to send JWT claims that can be mapped to user tokens, prefixed with OIDC_.
Same case transormation apply than LDAP_ and CAS_.

Define openid-attributes-claim-type with a comma-separated list of claims that should be mapped.

Multivalued JWT claims are not unrolled.
2024-02-13 21:38:48 +01:00
Virtually Nick
46db5f249d GUACAMOLE-1915: Bump versions for projects outside the 1.5.5 scope. 2024-01-30 12:37:45 -05:00
James Muehlner
c2697fa4ab Merge 1.5.5 changes back to master. 2024-01-30 17:16:16 +00:00