or in other words:

i want to use the normal guacamole web client with an dynamic json obejct 
containing the connection details.

The user should not login

The best thing would be that i can give the user a link and if he uses the 
link, the connection starts

 

I thought, that is what the json-auth 
(https://guacamole.apache.org/doc/gug/json-auth.html) is for

 

Von: Philipp Zeitschel <[email protected]> 
Gesendet: Mittwoch, 31. August 2022 23:01
An: [email protected]
Betreff: Re: authToken

 

I try:

 

I want to create an json object with the connection details and send it to the 
normal Web Client to bypass authentication and connection choosing

 

 

Creating and signing the json object works, i get back an accessToken Form 
/api/tokens

My question is now, how do i give the webapp the token?

 

I think there must be an Parameter like https://guacamoleserver/authToken=

 





Am 31.08.2022 um 22:29 schrieb Sean Hulbert 
<[email protected] 
<mailto:[email protected]> >:

 

You can try

 

curl -X POST -H 'Content-Type: application/x-www-form-urlencoded' -d 
'username=username&password=password' https://URLHERE

 

curl -X DELETE 
https://GuacamoleServer:8080/Guacamole/api/tokens/1A065A4E9D59753CD427A03F8C861B6D68B5CC245A75436707C66C234F8215E3

 

 

Thank You

Sean Hulbert

 

Founder / CEO

Work Ph: 925.663.5565

 

Security Centric Inc.

A Cybersecurity Enablement Company

We don't just run you through the motions, Our labs teach you how to think!

 

 

 

System Award Management

CAGE: 8AUV4

 

AFCEA San Francisco Chapter V.P.

 

If you have heard of a hacker by name, he/she has failed, fear the hacker you 
haven’t heard of!

 

CONFIDENTIALITY NOTICE: This communication with its contents may contain 
confidential and/or legally privileged information. It is solely for the use of 
the intended recipient(s). Unauthorized interception, review, use or disclosure 
is prohibited and may violate applicable laws including the Electronic 
Communications Privacy Act. If you are not the intended recipient, please 
contact the sender and destroy all copies of the communication. Content within 
this email communication is not legally binding as a contract and no promises 
are guaranteed unless in a formal contract outside this email communication.

 

igitur qui desiderat pacem, praeparet bellum!!!

Epitoma Rei Militaris

 

From: Philipp Zeitschel [mailto:[email protected]] 
Sent: Wednesday, August 31, 2022 1:11 PM
To: [email protected] <mailto:[email protected]> 
Subject: authToken

 

Hi,

i've requested an authToken via /api/tokens:

{"authToken":"54808533B1CCE7176838021B9CDD87583B04C67A9E1476A4621D453DA7F4A4AF","username":"blub","dataSource":"json","availableDataSources":["mysql","mysql-shared","json"]}
 

i could manually inject it into the webapp:

localStorage.setItem('GUAC_AUTH', 
'{"authToken":"54808533B1CCE7176838021B9CDD87583B04C67A9E1476A4621D453DA7F4A4AF","username":"blub","dataSource":"json","availableDataSources":["mysql","mysql-shared","json"]}')
 

what is the correct way to request an authToken and then redirect a User to the 
guacamole-client to establish an connection?

regards

Philipp 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to