5 Commits

Author	SHA1	Message	Date
Dave Kempe	2bf34440e6	v0.5.1: RDP resize fix, new themes, Docker config persistence ... - Fix RDP display resize for FreeRDP 3.x (patch 004: config.h struct layout) - Add aurora theme (midnight blue with ambient glow gradients) - Add jaguar theme (racing green & gold with subtle gradients) - Add bg_pattern support for CSS gradient backgrounds in themes - Fix Docker config.toml persistence across rebuilds (#38) - Add Docker Compose volume mount documentation - Increase API rate limit to 5/s burst 30 (fix spurious 429s) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-04 17:08:14 +11:00
Dave Kempe	ea72c52a31	v0.5.0: Theme system, ARM64 builds, Docker fixes, dependency updates ... Theme system: - 6 built-in presets (dark, light, high-contrast, terminal, nord, corporate) - Admin configures preset + per-color overrides in [theme] config section - Client-side theme switching via localStorage (flash-free) - All static pages updated with 28 CSS custom properties Proxy telemetry: - Track which side terminated connection (guacd/browser/cancelled) - Timing-based log levels (guacd close <5s = warning) - Clamp session dimensions to safe ranges (width 640-8192, height 480-8192, DPI 16-384) Docker fixes (#37): - Fix port mismatch: Dockerfile now uses 8089 consistently - Auto-generate admin API key on first run - Add API key setup docs and recordings volume to compose example ARM64 support: - Multi-platform Docker builds (linux/amd64 + linux/arm64) - Native ARM64 .deb and tarball builds via ubuntu-24.04-arm runner Dependency updates: - rustls 0.23.37, chrono 0.4.44, clap 4.5.60, toml 1.0.3 - futures-util 0.3.32, uuid 1.21.0, pulldown-cmark 0.13.1 - actions/upload-artifact v7, actions/download-artifact v8 Also: FreeRDP 3.x NULL deref patch (003), .gitignore for .playwright-mcp/ Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-01 15:05:41 +11:00
Dave Kempe	066a063304	Improve RDP display sizing: match browser dimensions on connect and resize ... - Send actual browser window dimensions at session creation (addressbook, sessions) instead of defaulting to 1920x1080 - Send initial sendSize() on WebSocket connect so guacd can resize the remote display via Display Update channel - Debounce window resize handler (250ms) to avoid overwhelming RDP server Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-14 10:55:40 +11:00
Dave Kempe	2187cfc1e4	Security hardening: 5 fixes from audit ... - Vault TLS: replace hardcoded danger_accept_invalid_certs(true) with configurable tls_skip_verify option (default: false) - Share tokens: use constant-time SHA-256 hash comparison to prevent timing side-channel attacks - OIDC pending states: add 10-minute TTL, evict stale entries on each login to prevent unbounded HashMap growth - Recording path traversal: add canonical path validation as defense- in-depth alongside existing string checks - Frontend XSS: escape all user-controlled data (filenames, paths) in innerHTML via escapeHtml/escapeAttr in client.html and recordings.html Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-07 11:34:54 +11:00
Dave Kempe	67101e27ce	Initial public release ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-06 14:38:53 +11:00