search

aiden0z / guacamole-auth-jwt

Guacamole authentication extension based on JWT.
MIT License
35 stars 9 forks source link

Cannot open more than one session in the same browser #6

Open gormux opened 5 years ago

gormux commented 5 years ago

Hello,

I use this auth plugin to make a custom portal. I can open a session to a computer, no problem. But if I open a second session, the first one disconnects.

I use the "normal" guacamole client : http://my_guacamole:8081/guacamole?token=%s&&GUAC_DATA_SOURCE=jwt&GUAC_ID=%s&GUAC_TYPE=c&GUAC_USERNAME=%s where token is obtained via /guacamole/api/token GUAC_ID is randomly generated, and GUAC_USERNAME obtained from the token answer of the API.

Using a very basic client (this one : https://github.com/aiden0z/guacamole-auth-jwt/issues/1), I don't have the issue.

So I suppose the "normal" guacamole client does not like something in the way I use it, but I cannot find what. Maybe it does not support using different usernames in the same browser ?

I can open multiple connections using multiple browsers, so I'm pretty sure the guacamole client is the cause.

Is this a known issue ? Are there other people using this auth plugin and the normal guacamole client ?

aronson commented 5 years ago

We have JWT integration at my company using this plugin. I've noticed that the normal guacamole client will not support multiple "authorized" sessions in the same browser session.

I think it's related to how Guacamole caches credential tokens, and that when a new session is open it somehow overrides the old credential. It's related to session state as far as I can tell.

Hopefully you find a solution!

gormux commented 5 years ago

So, you use another client ? If so, is it available to the public, or is it internal ?

iota-008 commented 1 year ago

Hi! can we pass the authToken in Headers instead of URL?

aiden0z commented 5 months ago

@iota-008 yes, the new v1.5.4 version has supported pass token in headers, please refer the readme for details.