Commit graph

57 commits

Author SHA1 Message Date
Bill Church
dbdac0ddd1
Update CI tools (#248)
* chore: ci tools updates

* ci tools updates

* chore: update ci
2021-05-19 12:13:37 -04:00
Bill Church
89ff3187b5
Update package.json 2021-05-19 11:10:20 -04:00
Bill Church
0ba29ad458 chore: update version 0.4.0 2021-05-19 14:58:42 +00:00
Bill Church
6bc9ffe2ed
0.4.0 Release (#246)
* feat: upgrade to socket.io 4.1.1 #242

* chore: lint ./app/client/src/js/index.js #242

* chore: eslint disable global Blob warning #242

* chore: lint ./app/index.js #242

* chore: lint ./app/server/app.js #242

* chore: setup eslint and airbnb rules disable standard #242

* Delete package-lock-old.json

* chore: lint ./app/index.js #242

* feat: implement alpine docker image from #213

* chore: lint ./app/server/app.js still TODO for stop function #242

* chore: lint ./app/server/util.js #242

* chore: lint ./app/server/app.js reorg socket and safe shutdown

* chore: grammar / spelling

* chore: fix some misplaced next returns in some Express routes #242

* chore: lint ./app/server/socket.js #242

* chore: bump version in ./app/package.json #242

* docs: update docs for 0.4.0 #242

* chore: update package-lock.json

* chore: install Prettier code linter #242

* chore: linting for Prettier #242

* chore: lint ./app/client/src/js/index.js #242

* chore: client linting #242

* Update package-lock.json

* chore: repackage wbssh2 bundle for testing #242

* chore: convert ./app/client/src/js/index.js to typescript #242

* chore: remove html rendering from node

* Update tsconfig.json

* Update tsconfig.json

* Delete index.js

* Update ChangeLog.md

* chore: config for development container #242

* Update BUILDING.md

* feat: pull in #234 staged for 0.4.0 #242

* docs: update changelog

* update package.json

* chore: split config from app/server/app.js #242

* chore: version bump

* chore: consistency

* feat: overridebasic fixes #243 included for #242

* chore: remove serverlog code

* docs: update changelog
2021-05-19 10:22:29 -04:00
Bill Church
8af11efa1a chore: release 3.1 2021-05-13 05:54:50 -04:00
Bill Church
26803d60f9 chore: linting 2021-05-11 15:34:01 -04:00
Bill Church
b324f338ad feat: CORS support
Support setting origins for socket.io, fixes #240
2021-05-11 14:55:38 -04:00
dependabot[bot]
e3550d738a
build(deps): bump ssri from 6.0.1 to 6.0.2 in /app (#233)
Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:03:41 -04:00
dependabot[bot]
2eab129bc1
build(deps): bump hosted-git-info from 2.8.5 to 2.8.9 in /app (#237)
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.5 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.9)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:03:32 -04:00
dependabot[bot]
411c9f257e
build(deps): bump lodash from 4.17.19 to 4.17.21 in /app (#236)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.19...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:03:22 -04:00
dependabot[bot]
78d7879610
build(deps): bump handlebars from 4.7.6 to 4.7.7 in /app (#235)
Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7.
- [Release notes](https://github.com/wycats/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md)
- [Commits](https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:03:11 -04:00
dependabot[bot]
32023d7e4f
build(deps): bump y18n from 4.0.0 to 4.0.1 in /app (#230)
Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:02:57 -04:00
dependabot[bot]
ac599787a6
build(deps): bump elliptic from 6.5.3 to 6.5.4 in /app (#228)
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.3...v6.5.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:02:46 -04:00
dependabot[bot]
d49982df1c
build(deps): bump ini from 1.3.5 to 1.3.8 in /app (#217)
Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.8)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-05-11 12:01:55 -04:00
Bill Church
dcfd81b454
fix: fixes default for allowreauth (#239)
fixes #238
2021-05-11 11:58:47 -04:00
Bill Church
7b7e8e7533 fix: obey host ssh.host in config fixes #190 2020-09-17 07:55:52 -04:00
dependabot[bot]
9c5ab09c7c
build(deps): bump elliptic from 6.5.2 to 6.5.3 in /app (#205)
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.3.
- [Release notes](https://github.com/indutny/elliptic/releases)
- [Commits](https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-30 12:32:41 -04:00
dependabot[bot]
4b981c7dbf
build(deps): bump lodash from 4.17.15 to 4.17.19 in /app (#204)
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-30 12:30:03 -04:00
dependabot[bot]
6564f532cf
build(deps-dev): bump standard-version from 7.1.0 to 8.0.1 in /app (#203)
Bumps [standard-version](https://github.com/conventional-changelog/standard-version) from 7.1.0 to 8.0.1.
- [Release notes](https://github.com/conventional-changelog/standard-version/releases)
- [Changelog](https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md)
- [Commits](https://github.com/conventional-changelog/standard-version/compare/v7.1.0...v8.0.1)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-07-30 12:29:40 -04:00
CChemin
fc2b7d4625
fix missing value for verify in the config.json sample (#192) 2020-03-30 23:59:42 -04:00
Bill Church
5cdc9d0978 chore: update config.json.sample 2020-03-19 10:37:00 -04:00
Bill Church
5fd290ea0a chore: bump pre-release version 2020-03-19 10:33:00 -04:00
Bill Church
675b4f5a3a feat: add SIGTERM to safe shutdown feature 2020-03-19 10:30:06 -04:00
Edgar Onghena
61672c3f1e Add shutdown middleware to prevent requests 2020-03-18 19:35:52 +01:00
Edgar Onghena
61f19ae3ce Make "safeShutdownDuration" configurable
Defaults to 300s = 5min
2020-03-18 19:25:48 +01:00
Edgar Onghena
eb7d91ffbc Add safe shudown
- SIGINT is intercepted and force-quits the 2nd time
 - Live countdown on Web UI
 - Countdown ignored if all clients disconnect
 - Clean exit function
2020-03-18 19:01:53 +01:00
Bill Church
7a89d45e48 chore: 3.0 release 2020-03-15 14:07:58 -04:00
Bill Church
58c3601af0
Module updates (#185)
* chore: removed compression option code, standardjs

* chore: update packages

* chore: update favicon.ico location

* chore: standardjs run

* chore: update changelog
2020-03-14 13:18:20 -04:00
Bill Church
546ac911c9 Merge branch 'pathchanges' 2020-03-14 11:25:33 -04:00
Bill Church
4686d1d6f2 Merge branch 'master' into pathchanges 2020-03-14 11:24:56 -04:00
Bill Church
2db504467c chore: pull changes from master 2020-03-14 11:10:29 -04:00
Bill Church
152ac1e898 chore: update to read-config-ng 2020-03-14 09:48:02 -04:00
Bill Church
506918dc68 config.json fix from #177 2020-03-14 09:47:38 -04:00
Bill Church
2bc5c030e3 chore: move read-config to read-config-ng 2020-03-14 09:27:40 -04:00
Bill Church
dd33a8b6b0 chore: move root path for all resources under /ssh 2020-03-14 09:06:10 -04:00
Chia-Chi Hsu
42f973b479 Fix: update config.json.sample (#177) 2020-01-17 04:43:25 -08:00
Bill Church
2289036605 chore: update validator to 12.1 for better IPv6 support 2019-11-23 09:21:36 -05:00
Bill Church
e796f9fb58 fix: subnet unauthorized now emits "ssherror" which persists across websocket termination 2019-11-23 09:00:28 -05:00
Bill Church
16a27ce62a
Pr/163 (#164)
* Add configuration option to restrict connections to specified subnets

Signed-off-by: Matt Oswalt <matt@keepingitclassless.net>

* Remove accidentally included message

Signed-off-by: Matt Oswalt <matt@keepingitclassless.net>

* Move to cidr-matcher

Signed-off-by: Matt Oswalt <matt@keepingitclassless.net>

* feat: Add configuration option to restrict connections to specified subnets
2019-11-23 08:45:59 -05:00
Bill Church
342df8eb9c
feat(auth): ssh private key auth implemented via config.json (#161)
If config.json is present and user.privatekey has an ssh-rsa private key defined as well as a user.name, the SSH server will staticlly authenticate to whatever host is specified on the URL with those credentials.

The ssh-rsa private key must have is line returns replaced with the litaral \n

Example: "-----BEGIN RSA PRIVATE KEY-----\nblahblahblah\n"
2019-11-15 17:22:53 -05:00
Bill Church
65d6ec6845
feat(config): specify local source address and port for client connections fixes #152 (#158) 2019-11-15 15:55:54 -05:00
Bill Church
ca20321625
update build environment (#157)
* Accept default username/password overrides from config. Clarified supplying custom config. (#146)

* feat(auth): username and password may now be sourced from config.json fixes #104

* style:remove test changelog

* build:remove uglify from build process and reaplce with terser

* style:format changelog
2019-11-15 13:01:51 -05:00
Bill Church
212df80fb6
User pass (#156)
* Accept default username/password overrides from config. Clarified supplying custom config. (#146)

* feat(auth): username and password may now be sourced from config.json fixes #104
2019-11-15 12:58:50 -05:00
Bill Church
9f3c661bdc chore(release): 0.2.10-0 2019-11-15 11:06:09 -05:00
Bill Church
93303ad132 Updated packages:
Updated packages:

    "colors": "~1.4.0",
    "compression": "~1.7.4",
    "debug": "^4.1.1",
    "express": "~4.17.1",
    "express-session": "~1.17.0",
    "socket.io": "2.2.0",
    "ssh2": "~0.8.6",
    "terser-webpack-plugin": "^2.2.1",
    "validator": "~12.0.0",
    "xterm-addon-fit": "^0.3.0",
    "xterm-addon-search": "^0.3.0",
    "xterm-addon-web-links": "^0.2.1"
    "@fortawesome/fontawesome-svg-core": "^1.2.25",
    "@fortawesome/free-solid-svg-icons": "^5.11.2",
    "clean-webpack-plugin": "^3.0.0",
    "copy-webpack-plugin": "^5.0.5",
    "cross-env": "^6.0.3",
    "css-loader": "^3.2.0",
    "file-loader": "^4.2.0",
    "postcss-discard-comments": "^4.0.2",
    "standard": "^14.3.1",
    "style-loader": "^1.0.0",
    "url-loader": "^2.2.0",
    "webpack": "^4.41.2",
    "webpack-cli": "^3.3.10",
    "webpack-merge": "^4.2.2",
    "xterm": "^4.2.0"
2019-11-15 10:50:15 -05:00
Bill Church
4ad7e7ed3f lock package versions 2019-10-18 17:24:22 -04:00
Bill Church
1be03d79f5 rebuild 2019-10-01 09:29:52 -04:00
Bill Church
dbcf973773 remove module provisioning 2019-09-18 08:57:33 -07:00
Bill Church
56086b01dd Missing require('fs') in server/app.js See issue [#135](../../issues/135)
- Missing require('fs') in `server/app.js` See issue [#135](../../issues/135)
- Patched read-config to mitigate vulnerability in js-yaml
  - issue not exploitable on webssh2 implementation
  - patched anyway
  - sending my patch upstream to read-config, webssh2 package.json points to patched version in my repository https://github.com/billchurch/nodejs-read-config
  - See https://github.com/nodeca/js-yaml/issues/475 for more detail
2019-06-13 14:39:47 -04:00
Bill Church
7cdcbec5f1 add missing fs
that was embarassing... fixes #135
2019-06-13 13:43:46 -04:00