New YAML config option: accept_any_key: true
- Accepts any public key without verification against authorized_keys
- Still passes the client's key fingerprint in the upstream username
- Format: fp:FINGERPRINT.originaluser
- Useful for proxying to apps that identify users by SSH key fingerprint
When using public key auth, include the client's key fingerprint
in the upstream username with format: fp:FINGERPRINT.originaluser
This allows upstream servers (like maldoror) to identify users
by their original SSH key even when sshpiper uses its own key
for upstream authentication.
* fix typos in docs
* use keys in named literal
For easier grepping, and better stability.
* libplugin: regenerate with v1.36.10
592ca79999 upgraded
the dependency, but didn't actually regenerate.
* all: run gofumpt
https://github.com/mvdan/gofumpt
The main appeal for me here is that my (and many other peoples')
editors run this on save, so doing a single diff here
keeps other diffs minimal.
* .github/workflows: add gofumpt checker
* fix lint
* Bump golangci-lint action to v8 and update linting args
* fix lint errors
* fix: correct loop condition in main function to process remaining arguments
* remove unused logs
* add banner to server password
* add updated crypto lib
* add test
* refactor: clean up whitespace in banner test
* fix: update test case name to use underscores for consistency
* Refactor plugin.proto and pluginbase.go to add support for metadata in connection context
* go fmt
* move test plugin out
* Refactor Dockerfile to build test plugin in e2e/testplugin directory
* mv testplugin -> testgrpcplugin
* add test for connection metadata
* enable logging to stdout
* Refactor Dockerfile to build test plugin in e2e/testplugin directory
* introduce plugin skel to reuse code
* Refactor code to use libplugin.NewSkelPlugin for plugin/kubernetes/main.go
Add YAML Plugin skel.go for plugin/yaml
* Fix code scanning alert no. 6: Incorrect conversion between integer types
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* fix gpt
* fjx password handling in SkelPlugin and skelpipeToWrapper
* go fmt
* Refactor Docker plugin to use skelpipe wrapper
* Refactor skel.go to use container username instead of client username
* revert yaml test order
* fix public and password mess up
* Refactor working dir to use skel
* revert deleted file
* Refactor skel.go to remove unused code and simplify MatchConn function
* Refactor skel.go to read userKnownHosts file in KnownHosts function
* remove workingdirbykey from goreleaser
* Refactor workingdir.go to use libplugin.SplitHostPortForSSH for parsing host and port
* Refactor skel.go to remove unused code and simplify MatchConn function
* merge doc into workingdir
---------
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* Make the log formatter configurable
The change lets us configure the deamon and the plugins to output logs
in the JSON format, which is easier to parse/filter by log processing
tools.
* Add validation for the log-format flag
* Add PipeCreateErrorCallback to handle pipe creation errors
* Add test for FailtobanPipeCreateFail
* Fix missing newline at end of file in pluginbase.go
