Jared Goodwin
3ef4cdf81a
Extract remote control functionality into separate library. ( #539 )
...
* Convert server to new single-file startup model.
* Add remote control implementations.
* Implement IViewerAuthorizer.
* Update hub endpoints.
* Implement HubEventHandler.
* Implement ViewerHubDataProvider.
* Implement page data provider.
* Implement RCL and refactor.
* Update submodule.
* Replace submodule with NuGet.
* Update copy URL.
* Update NuGet.
* Remove deprecated WebRTC.
* Remove deprecated WebRTC.
* Update Immense.RemoteControl
* Building out desktop projects.
* Bring more services into submodule.
* Update submodule.
* Update submodule.
* Refactoring for module.
* Update submodule.
* Update submodule
* Got Windows desktop app running.
* Refactor for submodule changes.
* FIx unattended session start.
* Switch desktop app out of console mode.
* Fix tests.
* Update publishing.
* Remove ClickOnce middleware.
* Remove ClickOnce remnants.
* Update submodule
* Add some logging.
* Update Linux path.
* Update submodule.
* Add cleanup service for unattended sessions that failed to start.
* Update submodule.
* Fix chat.
* Add ValidateExecutableReferencesMatchSelfContained property.
* Add other submodule projects. Align checkbox.
* Update submodule. Reduce deserialization in the browser, resulting in faster renders.
* Update submodule.
* Update submodule.
* Update submodule.
* Update submodule.
* Add orgId back for branding.
* Get branding loading in desktop apps.
* Update submodule.
* Create log dir.
* Refactor version check on config page.
* Update submodule.
* Update submodule.
* Change submodule URL.
* Correct namespace.
* Update submodule.
* Checkout submodules recursively.
2022-12-23 06:39:12 -08:00
Christopher Gebhardt
ec333a7a33
fix: Prevent invalid authorization headers from accessing the API
...
The API is secured by this authorization filter that should prevent access to the API when the auhorization header is invalid. Instead the filter just set the status to 403, but delivered the data anyway.
This commit fixes this by explicitly setting the result to an UnauthorizedResult, which prevents access to the API.
#495
2022-07-22 10:26:07 +02:00
Steve Sobol
66d15a6d4e
Ensure that auth payload includes both a key ID and a secret
2021-12-14 17:14:28 -08:00
Steve Sobol
539cf62b7c
Check for a valid Authorization: header
2021-12-14 17:10:09 -08:00
dkattan
4913535bc4
Made the authorization header require a Basic base64 encoded token instead of the literal key:secret as PowerShell 7 complains when you don't use a base64 encoded value.
2021-12-03 14:46:19 -06:00
Jared Goodwin
a4a6fd4f77
Return early if key is valid.
2021-07-29 07:58:18 -07:00
Jared
85e82d9bb6
Let API Token also authorize for ExpiringTokenFilter.
2021-07-29 07:57:34 -07:00
Jared Goodwin
8c3f997b89
Merged PR 5: Replace Server UI with Blazor
2021-07-29 07:57:31 -07:00
Jared Goodwin
f07abd16f5
Add support request desktop shortcut.
2021-07-29 07:56:33 -07:00
Jared Goodwin
337754df1a
Refactor and cleanup.
2021-07-29 07:56:15 -07:00
Jared Goodwin
4bbff9bf29
Create alerts button and frame.
...
Create cards for alerts.
2021-07-29 07:56:13 -07:00
Jared Goodwin
7ae5ab1e89
Add remote IP to API token logging.
2021-07-29 07:56:02 -07:00
Jared Goodwin
fcee249d0f
Add password generator. Add logging on API token validation. UI tweaks.
2021-07-29 07:56:02 -07:00
