Viktor Liu 274788b7cd [client] Refuse SSH JWT auth when the client changes the user name between auth requests on one connection (#8389) ...

* Refuse SSH JWT auth when the client changes the user name between auth requests on one connection

* Run SSH sessions and SFTP as the OS user that was authorized, taken from the connection context

2026-10-29 19:02:55 +09:00

..

winpty

[client] Support non-PTY no-command interactive SSH sessions (#5093)

2026-01-27 11:05:04 +01:00

command_execution_js.go

[client] Support non-PTY no-command interactive SSH sessions (#5093)

2026-01-27 11:05:04 +01:00

command_execution_unix.go

[client] Refuse path-bearing locale, TERM and TZ values from SSH clients (#8388)

2026-10-28 16:38:10 +01:00

command_execution_windows.go

[client] Validate and bound SSH session requests and channels (#8344)

2026-10-26 11:35:02 +01:00

command_execution.go

[client] Fix staticcheck findings from the updated golangci-lint (#7266)

2026-08-20 16:50:50 +02:00

compatibility_test.go

[client] Support non-PTY no-command interactive SSH sessions (#5093)

2026-01-27 11:05:04 +01:00

executor_drop_privileged_linux_test.go

[client] Drop SSH privileges through libc in PKCS#11 package builds (#8323)

2026-10-24 10:49:51 +02:00

executor_unix_privileged_test.go

[client] Categorize privileged tests behind a build tag and run them in Docker (#6425)

2026-06-28 16:15:54 +02:00

executor_unix_test.go

[client] Categorize privileged tests behind a build tag and run them in Docker (#6425)

2026-06-28 16:15:54 +02:00

executor_unix.go

[client] Drop SSH privileges through libc in PKCS#11 package builds (#8323)

2026-10-24 10:49:51 +02:00

executor_windows_test.go

[client] Classify Windows local accounts by NetBIOS name (#7628)

2026-09-30 11:10:14 +02:00

executor_windows.go

[client] Classify Windows local accounts by NetBIOS name (#7628)

2026-09-30 11:10:14 +02:00

jwt_test.go

[client] Refuse SSH JWT auth when the client changes the user name between auth requests on one connection (#8389)

2026-10-29 19:02:55 +09:00

port_forwarding.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00

privileges_other.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00

privileges_windows_test.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00

privileges_windows.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00

server_config_test.go

Apply the SSH root-login setting to uid 0, not only to the account named root (#8390)

2026-10-29 00:21:01 +09:00

server_test.go

[client] Support non-PTY no-command interactive SSH sessions (#5093)

2026-01-27 11:05:04 +01:00

server.go

[client] Refuse SSH JWT auth when the client changes the user name between auth requests on one connection (#8389)

2026-10-29 19:02:55 +09:00

session_handlers_js.go

[client] Support non-PTY no-command interactive SSH sessions (#5093)

2026-01-27 11:05:04 +01:00

session_handlers.go

[client] Refuse SSH JWT auth when the client changes the user name between auth requests on one connection (#8389)

2026-10-29 19:02:55 +09:00

session_hardening_test.go

[client] Bound the SSH session request queue and keep resizes from blocking the session loop (#8363)

2026-10-26 23:04:32 +09:00

session_limits_test.go

[client] Bound the SSH session request queue and keep resizes from blocking the session loop (#8363)

2026-10-26 23:04:32 +09:00

session_limits.go

[client] Bound the SSH session request queue and keep resizes from blocking the session loop (#8363)

2026-10-26 23:04:32 +09:00

setid_libc_linux.go

[client] Drop SSH privileges through libc in PKCS#11 package builds (#8323)

2026-10-24 10:49:51 +02:00

setid_unix.go

[client] Drop SSH privileges through libc in PKCS#11 package builds (#8323)

2026-10-24 10:49:51 +02:00

sftp_js.go

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

sftp_test.go

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

sftp_unix.go

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

sftp_windows.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00

sftp.go

[client] Refuse SSH JWT auth when the client changes the user name between auth requests on one connection (#8389)

2026-10-29 19:02:55 +09:00

shell_test.go

[client] Refuse path-bearing locale, TERM and TZ values from SSH clients (#8388)

2026-10-28 16:38:10 +01:00

shell_unix_test.go

[client] Ask the OS for privileges when a guarded SSH setting is changed (#7066)

2026-08-25 20:15:16 +02:00

shell.go

[client] Refuse path-bearing locale, TERM and TZ values from SSH clients (#8388)

2026-10-28 16:38:10 +01:00

test.go

[client] Unify peer and route ACL filtering with multi-source rules (#6322)

2026-09-03 10:02:50 +02:00

user_utils_js.go

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

user_utils_test.go

Apply the SSH root-login setting to uid 0, not only to the account named root (#8390)

2026-10-29 00:21:01 +09:00

user_utils.go

Apply the SSH root-login setting to uid 0, not only to the account named root (#8390)

2026-10-29 00:21:01 +09:00

userswitching_js.go

[client,management] Rewrite the SSH feature (#4015)

2025-11-17 17:10:41 +01:00

userswitching_unix.go

[client] Refuse path-bearing locale, TERM and TZ values from SSH clients (#8388)

2026-10-28 16:38:10 +01:00

userswitching_windows.go

[client] Derive Windows SSH privilege checks from the token and group membership (#6966)

2026-08-11 18:16:37 +02:00