Hi Sean,

 

thanks for the answer.

Your examples create a token and in the second steps deletes the token

But how can i use the token to bypass the authentification on the default 
guacamole web app?

 

I want to use the guacamole json auth plugin with the default guacamole web app 
but the documentation does only tell how to retrief a token, not what to do 
with it

 

Regards

 

Philipp

 

Von: Sean Hulbert <[email protected]> 
Gesendet: Mittwoch, 31. August 2022 22:29
An: [email protected]
Betreff: RE: authToken

 

You can try

 

curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' -d 
'username=username&password=password' https://URLHERE

 

curl -X DELETE 
https://GuacamoleServer:8080/Guacamole/api/tokens/1A065A4E9D59753CD427A03F8C861B6D68B5CC245A75436707C66C234F8215E3

 

 

Thank You

Sean Hulbert

 

Founder / CEO

Work Ph: 925.663.5565

 

Security Centric Inc.

A Cybersecurity Enablement Company

We don't just run you through the motions, Our labs teach you how to think!

 

 

 

System Award Management

CAGE: 8AUV4

 

AFCEA San Francisco Chapter V.P.

 

If you have heard of a hacker by name, he/she has failed, fear the hacker you 
haven’t heard of!

 

CONFIDENTIALITY NOTICE: This communication with its contents may contain 
confidential and/or legally privileged information. It is solely for the use of 
the intended recipient(s). Unauthorized interception, review, use or disclosure 
is prohibited and may violate applicable laws including the Electronic 
Communications Privacy Act. If you are not the intended recipient, please 
contact the sender and destroy all copies of the communication. Content within 
this email communication is not legally binding as a contract and no promises 
are guaranteed unless in a formal contract outside this email communication.

 

igitur qui desiderat pacem, praeparet bellum!!!

Epitoma Rei Militaris

 

From: Philipp Zeitschel [mailto:[email protected]] 
Sent: Wednesday, August 31, 2022 1:11 PM
To: [email protected] <mailto:[email protected]> 
Subject: authToken

 

Hi,

i've requested an authToken via /api/tokens:

{"authToken":"54808533B1CCE7176838021B9CDD87583B04C67A9E1476A4621D453DA7F4A4AF","username":"blub","dataSource":"json","availableDataSources":["mysql","mysql-shared","json"]}
 

i could manually inject it into the webapp:

localStorage.setItem('GUAC_AUTH', 
'{"authToken":"54808533B1CCE7176838021B9CDD87583B04C67A9E1476A4621D453DA7F4A4AF","username":"blub","dataSource":"json","availableDataSources":["mysql","mysql-shared","json"]}')
 

what is the correct way to request an authToken and then redirect a User to the 
guacamole-client to establish an connection?

regards

Philipp 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to