Commit Graph

102 Commits

Author SHA1 Message Date
Virtually Nick
5c3ddb4f00 GUACAMOLE-839: Merge fix handling of non-standard HTTPS ports for SSL client auth. 2025-04-10 06:27:46 -04:00
Michael Jumper
91d47fea58 GUACAMOLE-839: Do not consider port when comparing hostname from "Host" header.
Within the scope of the SSL auth, the port noted in the "Host" header is
not material to the routing of the request. We simply need to know
whether we've received the request at the primary URI or a generated
auth URI. The hostname is sufficient to determine this, and the
underlying port may not be clear when omitted from "Host".
2025-04-10 01:25:57 -07:00
Michael Jumper
0f80d0ddf2 GUACAMOLE-839: Fix check for lack of request headers (may be null). 2025-04-10 01:24:01 -07:00
Michael Jumper
95dc96cf33 GUACAMOLE-1956: Rename SSL client auth properties to use "ssl-auth" prefix (not just "ssl").
The "ssl" prefix sounds like it's meant for configuring general use of
SSL/TLS for encryption in front of Guacamole, which is confusing,
particularly when encountering the "SSL_ENABLED" environment variable.

The "ssl-auth" prefix and "SSL_AUTH_ENABLED" environment variable don't
suffer from the same issue.
2025-04-08 11:25:29 -07:00
Michael Jumper
bcdb62fbe7 GUACAMOLE-1956: Update BouncyCastle PKIX FIPS to latest compatible (v2.1.9). 2025-03-04 02:41:37 -08:00
Michael Jumper
51afe5ade8 GUACAMOLE-1956: Update BouncyCastle FIPS to latest compatible (v2.1.0). 2025-03-04 02:31:02 -08:00
Michael Jumper
78990d97dd GUACAMOLE-1956: Update Bouncy Castle to latest compatible (v1.80). 2025-03-04 02:31:02 -08:00
Michael Jumper
2df43bce9c GUACAMOLE-1956: Update Java dependencies to latest compatible. 2025-01-02 15:55:36 -08:00
Michael Jumper
ce98043c16 GUACAMOLE-1956: Revert upgrade of SAML dependencies back to latest compatible. 2025-01-01 21:03:04 -08:00
Virtually Nick
ddd09969d8 GUACAMOLE-1239: Remove per-extension configuration for case-sensitivity, retaining only global configuration. 2024-10-31 13:30:46 -04:00
Virtually Nick
adfa371a06 GUACAMOLE-1239: Remove Environment binding from SSO base class. 2024-10-04 06:39:57 -04:00
Mike Jumper
02138fb208 GUACAMOLE-1239: Merge support for configuring username case-insensitivity. 2024-10-02 09:24:37 -07:00
Virtually Nick
116f709454 GUACAMOLE-1239: Update JDBC queries to handle case-sensitivity. 2024-10-02 09:23:27 -04:00
Virtually Nick
4d5101574a GUACAMOLE-1239: Make identifier comparison case-insensitive. 2024-10-02 09:23:27 -04:00
corentin-soriano
3d0f43b558 GUACAMOLE-1611: Add new French translations. 2024-09-25 19:23:16 +02:00
Mike Jumper
0301a1148a GUACAMOLE-1006: Merge support for reading any property value as a Collection. 2024-08-30 10:44:51 -07:00
Virtually Nick
9da1289677 GUACAMOLE-1006: Implement Collection support within GuacamoleProperty classes. 2024-08-30 10:58:31 -04:00
Mike Jumper
086802ad2f GUACAMOLE-1980: Merge client version update to 1.6.0. 2024-08-28 23:02:39 -07:00
James Muehlner
929f6c7f6d GUACAMOLE-1980: Update client versions to 1.6.0. 2024-08-29 00:16:00 +00:00
Alex Leitner
68a0d22d2a GUACAMOLE-1956: Bring Java and JavaScript dependencies up to date. 2024-08-21 14:39:54 -04:00
James Muehlner
ea7c5ef18e GUACAMOLE-1956: Switch guacamole-auth-sso-ssl to updated version of bc-fips. 2024-06-11 18:43:38 +00:00
Michael Jumper
284353da48 Merge changes from patch branch back to main. 2024-06-11 11:19:52 -07:00
James Muehlner
429d96888e GUACAMOLE-1956: Update maven dependencies to latest compatible versions. 2024-06-11 17:27:37 +00:00
Virtually Nick
13494baa4a GUACAMOLE-1289: Move AuthenticationSession components to guacamole-exit. 2024-03-29 00:57:40 +00:00
Michael Jumper
5a43d494f2 Merge patch changes back to main. 2024-03-13 15:27:32 -07:00
James Muehlner
8e5cf7ab1b GUACAMOLE-1905: Revert Apache Santuario version for compatibility with reverted Woodstox version. 2024-03-13 21:53:04 +00:00
Virtually Nick
ecec7bc305 Merge 1.5.5 changes back to main. 2024-03-12 17:48:21 -04:00
Virtually Nick
325c97aed8 GUACAMOLE-1905: Merge revert to java-saml-compatible version of woodstox. 2024-03-12 17:45:46 -04:00
James Muehlner
dc016e4b9f GUACAMOLE-1905: Upgrade to jose4j 0.9.6. 2024-03-12 21:20:49 +00:00
James Muehlner
35195069e6 GUACAMOLE-1905: Revert to java-saml-compatible version of woodstox. 2024-03-12 21:14:52 +00:00
Virtually Nick
5843c67704 Merge 1.5.5 changes back to main. 2024-03-09 15:05:19 -05:00
Virtually Nick
fddcdd39f9 GUACAMOLE-1905: Update Java dependencies to latest compatible versions. 2024-03-03 16:16:46 -05:00
mildis
8c42553564 GUACAMOLE-1844 : OIDC JWT claims as user token
GUACAMOLE-1844 : OIDC JWT claims as user token

This patch allows IDP to send JWT claims that can be mapped to user tokens, prefixed with OIDC_.
Same case transormation apply than LDAP_ and CAS_.

Define openid-attributes-claim-type with a comma-separated list of claims that should be mapped.

Multivalued JWT claims are not unrolled.
2024-02-13 21:38:48 +01:00
Virtually Nick
46db5f249d GUACAMOLE-1915: Bump versions for projects outside the 1.5.5 scope. 2024-01-30 12:37:45 -05:00
James Muehlner
c2697fa4ab Merge 1.5.5 changes back to master. 2024-01-30 17:16:16 +00:00
Virtually Nick
4119304913 GUACAMOLE-1906: Bump guac-manifest versions and add 1.5.5 to the extension loader. 2024-01-29 21:53:33 -05:00
James Muehlner
a0b2d1f1b1 Merge 1.5.5 changes back to master. 2024-01-29 22:14:15 +00:00
Virtually Nick
ff20c8db08 GUACAMOLE-1906: Bump version numbers to 1.5.5. 2024-01-26 20:32:29 -05:00
James Muehlner
212955c16c Merge 1.5.4 changes back to master. 2023-12-04 17:23:53 +00:00
Mike Jumper
dbbe238cb4 GUACAMOLE-1859: Update to Apache Directory API v2.1.5. 2023-12-03 15:35:24 -08:00
Mike Jumper
1b11b31045 GUACAMOLE-1859: Update xmlsec to 2.2.6 (transitive dependency of SAML). 2023-12-01 11:05:56 -08:00
Virtually Nick
b02f30935a GUACAMOLE-1612: Merge updates to Italian translations 2023-12-01 06:40:54 -05:00
Mike Jumper
4d162810f7 GUACAMOLE-1887: Bump versions numbers of projects outside 1.5.4 scope. 2023-11-23 08:18:35 -08:00
Virtually Nick
9d2649c0fa Merge 1.5.4 changes back to master. 2023-11-22 17:34:44 -05:00
Mike Jumper
90ea156625 GUACAMOLE-1886: Bump version numbers to 1.5.4. 2023-11-22 12:55:32 -08:00
Mike Jumper
ed31d6f2e0 GUACAMOLE-839: Force usage of non-dynamic version of Bouncy Castle FIPS. 2023-10-06 12:17:15 -07:00
Mike Jumper
e46d06e6b8 GUACAMOLE-1780: Merge changes adding MFA compatibility to SSO support. 2023-07-06 08:27:31 -07:00
James Muehlner
e804e8f95d GUACAMOLE-1829: Correct versions of dependencies for remaining 1.5.2 versioned extensions. 2023-07-05 23:28:34 +00:00
Mike Jumper
993cde2545 Merge 1.5.3 changes back to master. 2023-07-04 09:11:34 -07:00
Virtually Nick
49300d17b4 GUACAMOLE-1816: Bump client versions to 1.5.3. 2023-07-03 13:51:40 -04:00