GUACAMOLE-2137 : OpenBao/Hashicorp Vault extension #1216

Open

adb014 wants to merge 27 commits into

apache:mainfrom

adb014:hashicorp

Commits on Jun 5, 2026

GUACAMOLE-2137: Change: take TokenFilter's modifier into account to retrieve value

TdlQ
authored and
David Bateman
committed
GUACAMOLE-2137: Add: module guacamole-vault-hv (Hashicorp Vault)

TdlQ
authored and
David Bateman
committed
GUACAMOLE-2137: Combine the pull requests #1116, #1143 and #1214
David Bateman
committed
GUACAMOLE-2137: Consistently used 'Function.identity()' in thenCompose statements. Remove unused GuacamoleExceptionSupplier
David Bateman
committed
GUACAMOLE-2137: Allow missing or incorrect application-wide vault
David Bateman
committed
GUACAMOLE-2137: Re-remove GuacamoleExceptionSupplier accidentially reintrodcude in last commit
David Bateman
committed
GUACAMOLE-2137: Inverse of logic in VaultInfo.eqauls method
David Bateman
committed
GUACAMOLE-2137: VaultInfo.equals and VaultInfo.hashcode must use the same logic for safe use as a HashMap key
David Bateman
committed
GUACAMOLE-2137: Add a timeout to the Future returned by getSecret, so that the Future isn't invalidated in the cache before its returned
David Bateman
committed
GUACAMOLE-2137: Refuse to accept token sink files that are world readable or not regular files
David Bateman
committed
GUACAMOLE-2137: Refactor code following code audit by SAST/Linter PMD
David Bateman
committed

Commits on Jun 9, 2026

GUACAMOLE-2137: Add wrapping of UserContext, so that User and ConnectionGroup information can be updated for the UI
David Bateman
committed
GUACAMOLE-2137: Fully abstract HvClient provision to the HvClientProvider class. Correct some comments
David Bateman
committed
GUACAMOLE-2137: A few minor changes proposed by PMD
David Bateman
committed
GUACAMOME-2137: Remove HvUserContext, as problem updated was that HvDirectoryService didn't unwrap HvConnectionGroup
David Bateman
committed
GUACAMOLE-2137: Fixes for comment blocks. No code changes
David Bateman
committed

Commits on Jun 12, 2026

GUACAMOLE-2137: Remove unused import removed in previous commit
David Bateman
committed
GUACAMOLE-2137: Rework signed SSH certificates
David Bateman
committed

Commits on Jun 15, 2026

GUACAMOLE-2137: Always include the secret record mount path in the cache key, to allow tokens from different secret records on the same connection
David Bateman
committed

Commits on Jun 16, 2026

GUACAMOLE-2137: Don't hard-code jackson databind version
David Bateman
committed

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jun 24, 2026

GUACAMOLE-2137: Minor coding fixes suggested by PMD
David Bateman
committed

Commits on Jul 10, 2026

GUACAMOLE-2137: Also allow key_bits for SSH signed certificates in the same way as for issued certificates
David Bateman
committed