From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id A7AA41FF17A for ; Tue, 11 Nov 2025 09:29:53 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id D2DF2F19; Tue, 11 Nov 2025 09:30:24 +0100 (CET) From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= To: pdm-devel@lists.proxmox.com Date: Tue, 11 Nov 2025 09:29:10 +0100 Message-ID: <20251111082938.221008-4-f.gruenbichler@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20251111082938.221008-1-f.gruenbichler@proxmox.com> References: <20251111082938.221008-1-f.gruenbichler@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1762849759251 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.048 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pdm-devel] [PATCH access-control 1/1] api: ticket: allow token-owned VNC ticket verification X-BeenThere: pdm-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Datacenter Manager development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Datacenter Manager development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pdm-devel-bounces@lists.proxmox.com Sender: "pdm-devel" b3VyIHRlcm1wcm94eSB3aWxsIGlzc3VlIGEgY2FsbCB0byB0aGlzIGVuZHBvaW50IG9uIHB2ZWRh ZW1vbiB0byB2ZXJpZnkgdGhlIFZOQwp0aWNrZXQgcGFzc2VkIGJ5IGEgY2xpZW50LiB3aXRoIFBE TSwgdGhlIHNoZWxsIGNsaWVudCBpcyBhY3R1YWxseSB1c2luZyBhIFBWRQp0b2tlbiB0byBhdXRo ZW50aWNhdGUsIGFuZCB0aGUgVk5DIHRpY2tldCBpcyBvd25lZCBieSB0aGlzIHRva2VuIGFzIHdl bGwuCgpTaWduZWQtb2ZmLWJ5OiBGYWJpYW4gR3LDvG5iaWNobGVyIDxmLmdydWVuYmljaGxlckBw cm94bW94LmNvbT4KLS0tCgpOb3RlczoKICAgIHYxOiByZXBsYWNlcyBtb2RpZnlpbmcgdGhlIGV4 aXN0aW5nIHRpY2tldCBjYWxsLCBzaW5jZSB0aGF0IGlzIG5vdCByZWFsbHkgYW4KICAgIG9wdGlv biBmb3IgUEJTL1BETQoKIHNyYy9QVkUvQVBJMi9BY2Nlc3NDb250cm9sLnBtIHwgNjAgKysrKysr KysrKysrKysrKysrKysrKysrKysrKysrKysrKysKIDEgZmlsZSBjaGFuZ2VkLCA2MCBpbnNlcnRp b25zKCspCgpkaWZmIC0tZ2l0IGEvc3JjL1BWRS9BUEkyL0FjY2Vzc0NvbnRyb2wucG0gYi9zcmMv UFZFL0FQSTIvQWNjZXNzQ29udHJvbC5wbQppbmRleCA0NTdhMGE2Li4yM2QwM2NkIDEwMDY0NAot LS0gYS9zcmMvUFZFL0FQSTIvQWNjZXNzQ29udHJvbC5wbQorKysgYi9zcmMvUFZFL0FQSTIvQWNj ZXNzQ29udHJvbC5wbQpAQCAtMzIyLDYgKzMyMiw2NiBAQCBfX1BBQ0tBR0VfXy0+cmVnaXN0ZXJf bWV0aG9kKHsKICAgICB9LAogfSk7CiAKK19fUEFDS0FHRV9fLT5yZWdpc3Rlcl9tZXRob2Qoewor ICAgIG5hbWUgPT4gJ3ZlcmlmeV92bmNfdGlja2V0JywKKyAgICBwYXRoID0+ICd2bmN0aWNrZXQn LAorICAgIG1ldGhvZCA9PiAnUE9TVCcsCisgICAgcGVybWlzc2lvbnMgPT4geworICAgICAgICBk ZXNjcmlwdGlvbiA9PiAiWW91IG5lZWQgdG8gcGFzcyB2YWxpZCBjcmVkaWVudGlhbHMuIiwKKyAg ICAgICAgdXNlciA9PiAnd29ybGQnLAorICAgIH0sCisgICAgcHJvdGVjdGVkID0+IDEsICMgZWxz ZSB3ZSBjYW4ndCBhY2Nlc3MgYXV0aGtleSBmaWxlcworICAgIGRlc2NyaXB0aW9uID0+ICJ2ZXJp ZnkgVk5DIGF1dGhlbnRpY2F0aW9uIHRpY2tldC4iLAorICAgIHBhcmFtZXRlcnMgPT4geworICAg ICAgICBhZGRpdGlvbmFsUHJvcGVydGllcyA9PiAwLAorICAgICAgICBwcm9wZXJ0aWVzID0+IHsK KyAgICAgICAgICAgIGF1dGhpZCA9PiB7CisgICAgICAgICAgICAgICAgZGVzY3JpcHRpb24gPT4g IlVzZXJJZCBvciB0b2tlbiIsCisgICAgICAgICAgICAgICAgdHlwZSA9PiAnc3RyaW5nJywKKyAg ICAgICAgICAgICAgICBtYXhMZW5ndGggPT4gNjQsCisgICAgICAgICAgICB9LAorICAgICAgICAg ICAgdm5jdGlja2V0ID0+IHsKKyAgICAgICAgICAgICAgICBkZXNjcmlwdGlvbiA9PiAiVGhlIFZO QyB0aWNrZXQuIiwKKyAgICAgICAgICAgICAgICB0eXBlID0+ICdzdHJpbmcnLAorICAgICAgICAg ICAgfSwKKyAgICAgICAgICAgIHBhdGggPT4geworICAgICAgICAgICAgICAgIGRlc2NyaXB0aW9u ID0+ICJWZXJpZnkgdGlja2V0LCBhbmQgY2hlY2sgaWYgdXNlciBoYXZlIGFjY2VzcyAncHJpdnMn IG9uICdwYXRoJyIsCisgICAgICAgICAgICAgICAgdHlwZSA9PiAnc3RyaW5nJywKKyAgICAgICAg ICAgICAgICBtYXhMZW5ndGggPT4gNjQsCisgICAgICAgICAgICB9LAorICAgICAgICAgICAgcHJp dnMgPT4geworICAgICAgICAgICAgICAgIGRlc2NyaXB0aW9uID0+ICJWZXJpZnkgdGlja2V0LCBh bmQgY2hlY2sgaWYgdXNlciBoYXZlIGFjY2VzcyAncHJpdnMnIG9uICdwYXRoJyIsCisgICAgICAg ICAgICAgICAgdHlwZSA9PiAnc3RyaW5nJywKKyAgICAgICAgICAgICAgICBmb3JtYXQgPT4gJ3B2 ZS1wcml2LWxpc3QnLAorICAgICAgICAgICAgICAgIG1heExlbmd0aCA9PiA2NCwKKyAgICAgICAg ICAgIH0sCisgICAgICAgIH0sCisgICAgfSwKKyAgICByZXR1cm5zID0+IHsgdHlwZSA9PiAibnVs bCIgfSwKKyAgICBjb2RlID0+IHN1YiB7CisgICAgICAgIG15ICgkcGFyYW0pID0gQF87CisKKyAg ICAgICAgbXkgJGF1dGhfaWQgPSAkcGFyYW0tPnthdXRoaWR9OworCisgICAgICAgIG15ICRycGNl bnYgPSBQVkU6OlJQQ0Vudmlyb25tZW50OjpnZXQoKTsKKworICAgICAgICBteSAkcmVzID0gZXZh bCB7CisgICAgICAgICAgICBteSAkbm9ybXBhdGggPSBQVkU6OkFjY2Vzc0NvbnRyb2w6Om5vcm1h bGl6ZV9wYXRoKCRwYXJhbS0+e3BhdGh9KTsKKyAgICAgICAgICAgIFBWRTo6QWNjZXNzQ29udHJv bDo6dmVyaWZ5X3ZuY190aWNrZXQoJHBhcmFtLT57dm5jdGlja2V0fSwgJGF1dGhfaWQsICRub3Jt cGF0aCk7CisgICAgICAgIH07CisgICAgICAgIGlmIChteSAkZXJyID0gJEApIHsKKyAgICAgICAg ICAgIG15ICRjbGllbnRpcCA9ICRycGNlbnYtPmdldF9jbGllbnRfaXAoKSB8fCAnJzsKKyAgICAg ICAgICAgIHN5c2xvZygnZXJyJywgImF1dGhlbnRpY2F0aW9uIGZhaWx1cmU7IHJob3N0PSRjbGll bnRpcCB1c2VyPSRhdXRoX2lkIG1zZz0kZXJyIik7CisgICAgICAgICAgICAjIGRvIG5vdCByZXR1 cm4gYW55IGluZm8gdG8gcHJldmVudCB1c2VyIGVudW1lcmF0aW9uIGF0dGFja3MKKyAgICAgICAg ICAgIGRpZSBQVkU6OkV4Y2VwdGlvbi0+bmV3KCJhdXRoZW50aWNhdGlvbiBmYWlsdXJlXG4iLCBj b2RlID0+IDQwMSk7CisgICAgICAgIH0KKworICAgICAgICBQVkU6OkNsdXN0ZXI6OmxvZ19tc2co J2luZm8nLCAncm9vdEBwYW0nLCAic3VjY2Vzc2Z1bCBhdXRoIGZvciB1c2VyICckYXV0aF9pZCci KTsKKworICAgICAgICByZXR1cm4gdW5kZWY7CisgICAgfSwKK30pOworCiBfX1BBQ0tBR0VfXy0+ cmVnaXN0ZXJfbWV0aG9kKHsKICAgICBuYW1lID0+ICdjaGFuZ2VfcGFzc3dvcmQnLAogICAgIHBh dGggPT4gJ3Bhc3N3b3JkJywKLS0gCjIuNDcuMwoKCgpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwpwZG0tZGV2ZWwgbWFpbGluZyBsaXN0CnBkbS1kZXZlbEBs aXN0cy5wcm94bW94LmNvbQpodHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1iaW4vbWFpbG1h bi9saXN0aW5mby9wZG0tZGV2ZWwK