On Thu, Jun 5, 2025 at 4:30 PM Tom Eaton <[email protected]> wrote: > Hi Nick, > > Yes, I’ve got an expires in the JSON, however in this use case the user is > likely to click on one link then the other in short succession, opening > both connections in seperate tabs. I am assuming this will end up in a > race condition if the expires time is short lived but not short enough for > it to expire. > > Tom > > > Got it - I wondered if that were the case, but figured I'd try the easy stuff, first :-).
The only option I can think of for you to try, here, would be to "randomize" the username that is sent to Guacamole such that no link ever generates the same username. If you did that, and only delivered a single connection per JSON authentication link, you could have Guacamole log in and automatically start the connection, and each time the user clicked on a link they'd get a new username, new login, etc. Others on the list may have some other ideas. -Nick >
