From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 157F91FF183 for ; Wed, 5 Nov 2025 15:13:51 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 252632653B; Wed, 5 Nov 2025 15:14:12 +0100 (CET) From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= To: pve-devel@lists.proxmox.com Date: Wed, 5 Nov 2025 15:13:04 +0100 Message-ID: <20251105141335.1230493-3-f.gruenbichler@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20251105141335.1230493-1-f.gruenbichler@proxmox.com> References: <20251105141335.1230493-1-f.gruenbichler@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1762352000312 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.048 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pve-devel] [PATCH access-control 1/1] api: ticket: allow token-owned VNC ticket verification X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox VE development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" b3VyIHRlcm1wcm94eSB3aWxsIGlzc3VlIGEgY2FsbCB0byB0aGlzIGVuZHBvaW50IG9uIHB2ZWRh ZW1vbiB0byB2ZXJpZnkgdGhlIFZOQwp0aWNrZXQgcGFzc2VkIGJ5IGEgY2xpZW50LiB3aXRoIFBE TSwgdGhlIHNoZWxsIGNsaWVudCBpcyBhY3R1YWxseSB1c2luZyBhIFBWRQp0b2tlbiB0byBhdXRo ZW50aWNhdGUsIGFuZCB0aGUgVk5DIHRpY2tldCBpcyBvd25lZCBieSB0aGlzIHRva2VuIGFzIHdl bGwuCgpTaWduZWQtb2ZmLWJ5OiBGYWJpYW4gR3LDvG5iaWNobGVyIDxmLmdydWVuYmljaGxlckBw cm94bW94LmNvbT4KLS0tCgpOb3RlczoKICAgIGJlc3Qgdmlld2VkIHdpdGggLXcKCiAgICBhbHRl cm5hdGl2ZWx5LCB3ZSBjb3VsZCBjaGFuZ2UgdGVybXByb3h5IHRvIGRvIHRoaXMgZGlyZWN0bHkg aW4KICAgIFJ1c3QgaW5zdGVhZCBvZiBkb2luZyBhbiBBUEkgY2FsbC4uCgogc3JjL1BWRS9BUEky L0FjY2Vzc0NvbnRyb2wucG0gfCA0MCArKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0tLS0t LQogMSBmaWxlIGNoYW5nZWQsIDI3IGluc2VydGlvbnMoKyksIDEzIGRlbGV0aW9ucygtKQoKZGlm ZiAtLWdpdCBhL3NyYy9QVkUvQVBJMi9BY2Nlc3NDb250cm9sLnBtIGIvc3JjL1BWRS9BUEkyL0Fj Y2Vzc0NvbnRyb2wucG0KaW5kZXggNDU3YTBhNi4uYTIyYzcwMCAxMDA2NDQKLS0tIGEvc3JjL1BW RS9BUEkyL0FjY2Vzc0NvbnRyb2wucG0KKysrIGIvc3JjL1BWRS9BUEkyL0FjY2Vzc0NvbnRyb2wu cG0KQEAgLTI3NCwzMSArMjc0LDQ1IEBAIF9fUEFDS0FHRV9fLT5yZWdpc3Rlcl9tZXRob2Qoewog ICAgICAgICBteSAkdXNlcm5hbWUgPSAkcGFyYW0tPnt1c2VybmFtZX07CiAgICAgICAgICR1c2Vy bmFtZSAuPSAiXEAkcGFyYW0tPntyZWFsbX0iIGlmICRwYXJhbS0+e3JlYWxtfTsKIAotICAgICAg ICAkdXNlcm5hbWUgPSBQVkU6OkFjY2Vzc0NvbnRyb2w6Omxvb2t1cF91c2VybmFtZSgkdXNlcm5h bWUpOworICAgICAgICBteSAkdG9rZW5fdm5jX3RpY2tldF9vbmx5ID0gUFZFOjpBY2Nlc3NDb250 cm9sOjpwdmVfdmVyaWZ5X3Rva2VuaWQoJHVzZXJuYW1lLCAxKSAmJiAkcGFyYW0tPntwYXRofSAm JiAkcGFyYW0tPntwcml2c307CisKKyAgICAgICAgJHVzZXJuYW1lID0gUFZFOjpBY2Nlc3NDb250 cm9sOjpsb29rdXBfdXNlcm5hbWUoJHVzZXJuYW1lKSBpZiAhJHRva2VuX3ZuY190aWNrZXRfb25s eTsKICAgICAgICAgbXkgJHJwY2VudiA9IFBWRTo6UlBDRW52aXJvbm1lbnQ6OmdldCgpOwogCiAg ICAgICAgIG15ICRyZXM7CiAgICAgICAgIGV2YWwgewotICAgICAgICAgICAgIyB0ZXN0IGlmIHVz ZXIgZXhpc3RzIGFuZCBpcyBlbmFibGVkCi0gICAgICAgICAgICAkcnBjZW52LT5jaGVja191c2Vy X2VuYWJsZWQoJHVzZXJuYW1lKTsKLQotICAgICAgICAgICAgaWYgKCRwYXJhbS0+e3BhdGh9ICYm ICRwYXJhbS0+e3ByaXZzfSkgeworICAgICAgICAgICAgIyBzcGVjaWFsIGNhc2UgVk5DIHRpY2tl dCBjaGVjayBieSB0ZXJtcHJveHkKKyAgICAgICAgICAgIGlmICgkdG9rZW5fdm5jX3RpY2tldF9v bmx5KSB7CiAgICAgICAgICAgICAgICAgJHJlcyA9IHZlcmlmeV9hdXRoKAogICAgICAgICAgICAg ICAgICAgICAkcnBjZW52LAogICAgICAgICAgICAgICAgICAgICAkdXNlcm5hbWUsCiAgICAgICAg ICAgICAgICAgICAgICRwYXJhbS0+e3Bhc3N3b3JkfSwKLSAgICAgICAgICAgICAgICAgICAgJHBh cmFtLT57b3RwfSwKKyAgICAgICAgICAgICAgICAgICAgdW5kZWYsCiAgICAgICAgICAgICAgICAg ICAgICRwYXJhbS0+e3BhdGh9LAogICAgICAgICAgICAgICAgICAgICAkcGFyYW0tPntwcml2c30s CiAgICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgIH0gZWxzZSB7Ci0gICAgICAgICAgICAg ICAgJHJlcyA9IGNyZWF0ZV90aWNrZXRfZG8oCi0gICAgICAgICAgICAgICAgICAgICRycGNlbnYs Ci0gICAgICAgICAgICAgICAgICAgICR1c2VybmFtZSwKLSAgICAgICAgICAgICAgICAgICAgJHBh cmFtLT57cGFzc3dvcmR9LAotICAgICAgICAgICAgICAgICAgICAkcGFyYW0tPntvdHB9LAotICAg ICAgICAgICAgICAgICAgICAkcGFyYW0tPnsndGZhLWNoYWxsZW5nZSd9LAotICAgICAgICAgICAg ICAgICk7CisgICAgICAgICAgICAgICAgIyB0ZXN0IGlmIHVzZXIgZXhpc3RzIGFuZCBpcyBlbmFi bGVkCisgICAgICAgICAgICAgICAgJHJwY2Vudi0+Y2hlY2tfdXNlcl9lbmFibGVkKCR1c2VybmFt ZSk7CisKKyAgICAgICAgICAgICAgICBpZiAoJHBhcmFtLT57cGF0aH0gJiYgJHBhcmFtLT57cHJp dnN9KSB7CisgICAgICAgICAgICAgICAgICAgICRyZXMgPSB2ZXJpZnlfYXV0aCgKKyAgICAgICAg ICAgICAgICAgICAgICAgICRycGNlbnYsCisgICAgICAgICAgICAgICAgICAgICAgICAkdXNlcm5h bWUsCisgICAgICAgICAgICAgICAgICAgICAgICAkcGFyYW0tPntwYXNzd29yZH0sCisgICAgICAg ICAgICAgICAgICAgICAgICAkcGFyYW0tPntvdHB9LAorICAgICAgICAgICAgICAgICAgICAgICAg JHBhcmFtLT57cGF0aH0sCisgICAgICAgICAgICAgICAgICAgICAgICAkcGFyYW0tPntwcml2c30s CisgICAgICAgICAgICAgICAgICAgICk7CisgICAgICAgICAgICAgICAgfSBlbHNlIHsKKyAgICAg ICAgICAgICAgICAgICAgJHJlcyA9IGNyZWF0ZV90aWNrZXRfZG8oCisgICAgICAgICAgICAgICAg ICAgICAgICAkcnBjZW52LAorICAgICAgICAgICAgICAgICAgICAgICAgJHVzZXJuYW1lLAorICAg ICAgICAgICAgICAgICAgICAgICAgJHBhcmFtLT57cGFzc3dvcmR9LAorICAgICAgICAgICAgICAg ICAgICAgICAgJHBhcmFtLT57b3RwfSwKKyAgICAgICAgICAgICAgICAgICAgICAgICRwYXJhbS0+ eyd0ZmEtY2hhbGxlbmdlJ30sCisgICAgICAgICAgICAgICAgICAgICk7CisgICAgICAgICAgICAg ICAgfQogICAgICAgICAgICAgfQogICAgICAgICB9OwogICAgICAgICBpZiAobXkgJGVyciA9ICRA KSB7Ci0tIAoyLjQ3LjMKCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18KcHZlLWRldmVsIG1haWxpbmcgbGlzdApwdmUtZGV2ZWxAbGlzdHMucHJveG1veC5j b20KaHR0cHM6Ly9saXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHZl LWRldmVsCg==