eduvpn / macos Goto Github PK

DropDMG is not free software.

When no 2FA is set the QR tag is missing for enrollment, instead you get a textbox where you should enter the 2FA OTP(?).

See Carthage directory. This does not belong in repository.

Please use org.letsconnect-vpn.app.macos as the client_id for the Let's Connect! branded version, it currently uses the one for eduVPN still.

When choosing a custom url after initiating login and 'approve' the app still shows the "done" button. Clicking on "back" button doesn't work. A second click on "done" will give a second-login.

The DMG file contains the eduVPN app as expected, but it also contains these three files:

• DistributionSummary.plist
• ExportOptions.plist
• Packaging.log

These should be cleaned away before building the DMG.

Oi,

eduVPN is written like 'eduVPN' (instead of EduVPN). Since the app is being developed now, it can't hurt to do it right the first time, instead of changing it afterwards :-)

For the Let's Connect build, this artwork should be used: https://github.com/letsconnectvpn/artwork/

It seems Tunnelblick offers you the choice of OpenVPN 2.3.x or OpenVPN 2.4.x. The eduVPN app for macOS MUST use OpenVPN 2.4.

It seems the default behavior of Tunnelblick is to disable IPv6 by default. We don't want this for eduVPN.

Due to issue #78 I have an non working profile.
When deleting the VPN profile, add manual the same server, authenticate and approve the token download. The 'new' profile still can't connect. It looks like as-if the delete wasn't fully done. Server-side there hasn't been created a new config.
Issue might be related to isue #78

See Cartfile.

When I use the status bar menu to open the preferences dialog, the dialog appears below all my active windows. This is especially problematic when I have Show in Dock disabled, because then I need Exposé to find the preferences dialog.

Using the Dock icon everything works as expected.

It seems that eduVPN requests a lists of available VPNs when it starts, because when I start it without an internet connection, I see this:

A workaround is to fix the internet connection and restart the app.

I think it would be better if the client caches the list of VPNs, so that it doesn't have to be restarted.

Apparently it is only possible to add profiles, and never to delete them. Implement delete. If this was already implemented, my excuses. I don't have the ability to test with macOS.

When refresh token expires or was revoked then a user should re-authenticatie via OAuth.
At this moment the user will get an error message (see screenshot)

This can be tested by disabling the authorization in the webinterface.

When I disconnect a running session and quickly re-connect. I get strange errors. Sometimes the connection disconnects within a second. Sometimes error notifications.

Normal development takes place in master. Currently master is empty.

When the server is slow to respond, or not available the user loses control over the UI and is unable to cancel the action.

• allow user to at all times "cancel" connection attempt to avoid having an UI that is "stuck"
• give appropriate feedback when trying to connect / what is going on
• display error when connection fails

When changed to developer mode (via preferences) it is impossible to connect to an instance.
See screenhost

When connected , the obtained ip address isn't shown

In the Web application an user can revoke the Oauth token by clicking "intrekken" see screenshot:

At the next connect of the app, the app should be able to retrieve a new Oauth token. Somehow the token never reaches the app, and the webbrowser status is “waiting for 127.0.0.1”.

When an administrator disabled an user. The user gets a notification he's disabled when connecting in the profile-page. When the user is in the "connect/disconnect" page he doesn't get a notification he's disabled.

Now there is no way to know what changed between releases.

Possibly related to #39.

When I'm on a network without native IPv6 available and I connect to a eduVPN instance with IPv6 available, the default resolver will still not try to resolve IPv6 addresses. Illustration:

% curl v6.myip.tf
curl: (6) Could not resolve host: v6.myip.tf

% host v6.myip.tf
v6.myip.tf has IPv6 address 2001:19f0:5001:229:80::1
v6.myip.tf has IPv6 address 2001:19f0:7001:1031:80::1

% curl 'http://[2001:19f0:5001:229:80::1]'
2001:700:0:4108::1001

As we can see, IPv6 connectivity works fine but only if I use IPv6 addresses directly. Connections to IPv6-only hostnames will fail and connections to dualstack hostnames will go over IPv4. This applies to both Firefox and Safari. ping6 and traceroute6 work, also when given a hostname.

Expected behaviour:

% curl v6.myip.tf
2001:700:0:4108::1001

This works if the underlying connection supports IPv6.

Somewhat related to #44.

When the app is opened through Spotlight from a fullscreen space, while the Dock icon is hidden in the preferences, eduVPN will appear behind the fullscreen window and will not be moved to a free space, even if «Show eduVPN…» is selected from the menu bar.

The only two ways to get hold of the eduVPN window is to restart eduVPN, or to select «Show eduVPN…», move away from the space and then move back to the space where it was originally started.

Hi,

https://static.eduvpn.nl/disco/

See https://github.com/eduvpn/documentation/blob/disco-update/API.md#instance-discovery for a description.

After a few connects/disconnect to the frkovpn VPN the back button (top left) isn't working. I can still "connect", but can't go back.

The "distributed" mode means an OAuth token can be used to get a VPN profile/config in other countries. In the app the "-" symbol indicates I should be able to delete a single country, however I can only delete "the netherlands". When I delete .NL all countries disappear.

This is not a real bug, but more cosmetic issue.

It would be great to have releases and release notes (changelog). This would mean:

• merge all outstanding (dev) branches in master before making a release;
• tag every release that we build and distribute to end users;
• create a changelog showing the difference between the versions;

To create a changelog, you can see the examples in the Windows and Android repositories, i.e. https://github.com/Amebis/eduVPN/blob/master/CHANGES.md and https://github.com/eduvpn/android/blob/master/CHANGES.md

After installing a clean version i tried to add a profile for both the secure internet and secure access usecase but the profiles are not shown. I need to restart eduVPN to see them.

Made the "Let's Connect!" build of the release/1.1a1 on my system. It does seem to (almost) work except connecting. Maybe I'm doing something wrong?

As administrator you can disable users in the webportal. I disabled myself, disconnected the VPN and tried to connect. The result was :

Second time I got redirect to webpage, which mentions I was disabled (that's good).

When the refresh token is revoked. The user will be send to the webinterface when trying to connect. Next an user clicks "approve" -> the eduVPN app will crash. It seems the local webservice isn't started (correctly).

I is a "textarea" at the moment and doesn't show any hint you need to add https:// in front.

Proposal: make it 1 line, and always add https:// so only ask the user to provide the hostname. This is the same on the other platforms.

It seems it currently is 2.4.4.

It points to a file in Tunnelblick which is not part of eduVPN. Better remove this whole check for "free public DNS"... I was very confused by the log message...

When changing my default browser to chrome and choose "institute access" - DEMO the chrome browser opens an empty browser tab.

there is no input field available to enter the requested token and to succeed enrollment

When trying to connect the VPN to country Ugunda (high latency). After clicking on "connect" the app doesn't respond (that's how it experiences) after a few seconds I click again on 'connect'. A few seconds later the connection screen appears and an error message appears (see screenshot)
Strangely the VPN will get connected and the icon changes to 'green'.

An user can revoke the Oauth token in the Webportal, for example when his device is lost.
The client should in this case initiate a re-authentication. At this moment the client gets an error message “An unknown error occurred"

An eduVPN admin can enforce 2factor authentication.
When the user hasn't enrolled himself before (via the webinterface) the eduVPN client app should offer the ability to enroll at the moment the user wants to connect to that specific profile.

https://github.com/eduvpn/documentation/blob/master/API.md#two-factor-enrollment

The current client_id is org.eduvpn.app. Please start using org.eduvpn.app.macos. Everything else related to OAuth stays the same.

Currently the eduVPN icon in tray and in dock have always the same color.
Dock color is orange and in tray it's grey. At least the tray icon color should change depending of the connection status. From red (disconnected), yellow (connecting) to green (connected)

When a VPN session has been established and the user immediately shutdowns the eduVPN client, the local recursive nameserver setting (/etc/resolv.conf) doesn't always return to the correct recursive nameserver.

I have the impression that this also occurs when normal stopping the VPN connection.

It will be nice to have brew for this project

Tag the exact release that will be published for users to download / use. So we know which code is actually used.

test condition:
-running client - VPN is started successfully
-delete server side the available client configuration (...vpn-user-portal/configurations)
-client after a while redirects to authentication page WRONG
-clients adds a second server profile WRONG

correct behaviour:
-client should automatically create a new valid configuration (as defined in api.md)