Repository navigation

feat(server)!: post-authentication connection binding for multi-user servers - #1413

Merged

Marc-André Moreau (mamoreau-devolutions) merged 33 commits into

Devolutions:masterfrom

rcarmo:wrdp

Oct 8, 2026

Merged

feat(server)!: post-authentication connection binding for multi-user servers#1413
Marc-André Moreau (mamoreau-devolutions) merged 33 commits into
Devolutions:masterfrom
rcarmo:wrdp

Commits on Oct 8, 2026
- Add post-auth connection binder hook
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  1634a4e
- Scope reactivation credential cache to connection
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  5bafaad
- Expose CredSSP delegated credentials to servers
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  8b022ab
- Address post-auth binder review feedback
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  be4c612
- Avoid rebinding during RDP reactivation
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  aee82d3
- Keep bound server handlers connection-local
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  61e6f8a
- Clarify credential checks during reactivation
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  8f091bd
- Update server credential hook docs
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  3d2834c
- Avoid caching authenticated credentials
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  7074e63
- Document bound handler scoping
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  9ae3bc2
- Track accepted credential origin
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  c4d47b8
- Preserve bound handlers during reactivation
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  f96d408
- Pair received credentials with origin
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  0613f4e
- Move credential handoff docs into rustdoc
  
  Rui Carmo
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  cc260ea
- Preserve credential validator backend errors
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  db9e3c0
- Validate credentials before session activation
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  c2d292a
- Pass negotiated desktop size to connection binder
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  66808d2
- Make fork CI and fuzz workflows manual-only
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  3abac00
- Make fork RDP automation manual-only
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  f6c972c
- Make Advanced Input own mouse delivery
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  109461c
- Preserve HYBRID_EX credential denial response
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  3c9728b
- Send ERRINFO when credential hooks reject
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  fe2b70e
- Restore bound displays when async calls cancel
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  0e13fcc
- Remove dead credential reactivation state
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  ce61861
- Make bound connection slot updates synchronous
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  df3cd29
- Preserve credential validator API compatibility
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  8b9ae8a
- Keep delegated credentials out of acceptor results
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  ac2c412
- Restore upstream CI and fuzz triggers
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  0086d11
- Activate Advanced Input ownership on first event
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  0c31427
- Defer validation for auto-reconnect attempts
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  4019fc7
- Name credential hooks for connection setup
  
  Rui Carmo (rcarmo)
  authored and
  Marc-André Moreau (mamoreau-devolutions)
  committed
  b736ce1
- fix(server): preserve authorization semantics
  
  Marc-André Moreau (mamoreau-devolutions)
  and
  Copilot
  committed
  0d8af13
- fix(server): keep the accept-loop future compact
  
  Marc-André Moreau (mamoreau-devolutions)
  and
  Copilot
  committed
  36b30ad

Commits

Commits on Oct 8, 2026