From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id DED3B1FF187 for ; Fri, 2 Jan 2026 17:07:09 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 0764EE8A6; Fri, 2 Jan 2026 17:08:17 +0100 (CET) From: Samuel Rufinatscha To: pbs-devel@lists.proxmox.com Date: Fri, 2 Jan 2026 17:07:43 +0100 Message-ID: <20260102160750.285157-5-s.rufinatscha@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260102160750.285157-1-s.rufinatscha@proxmox.com> References: <20260102160750.285157-1-s.rufinatscha@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1767370060643 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.247 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pbs-devel] [PATCH proxmox-backup v3 4/4] pbs-config: add TTL window to token secret cache X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" VmVyaWZ5X3NlY3JldCgpIGN1cnJlbnRseSBjYWxscyByZWZyZXNoX2NhY2hlX2lmX2ZpbGVfY2hh bmdlZCgpIG9uIGV2ZXJ5CnJlcXVlc3QsIHdoaWNoIHBlcmZvcm1zIGEgbWV0YWRhdGEoKSBjYWxs IG9uIHRva2VuLnNoYWRvdyBlYWNoIHRpbWUuClVuZGVyIGxvYWQgdGhpcyBhZGRzIHVubmVjZXNz YXJ5IG92ZXJoZWFkLCBjb25zaWRlcmluZyBhbHNvIHRoZSBmaWxlCnVzdWFsbHkgc2hvdWxkIHJh cmVseSBjaGFuZ2UuCgpUaGlzIHBhdGNoIGludHJvZHVjZXMgYSBUVEwgYm91bmRhcnksIGNvbnRy b2xsZWQgYnkKVE9LRU5fU0VDUkVUX0NBQ0hFX1RUTF9TRUNTLiBGaWxlIG1ldGFkYXRhIGlzIG9u bHkgcmUtbG9hZGVkIG9uY2UgdGhlClRUTCBoYXMgZXhwaXJlZC4gRG9jdW1lbnRzIFRUTCBlZmZl Y3RzLgoKVGhpcyBwYXRjaCBpcyBwYXJ0IG9mIHRoZSBzZXJpZXMgd2hpY2ggZml4ZXMgYnVnICM3 MDE3IFsxXS4KClsxXSBodHRwczovL2J1Z3ppbGxhLnByb3htb3guY29tL3Nob3dfYnVnLmNnaT9p ZD03MDE3CgpTaWduZWQtb2ZmLWJ5OiBTYW11ZWwgUnVmaW5hdHNjaGEgPHMucnVmaW5hdHNjaGFA cHJveG1veC5jb20+Ci0tLQpDaGFuZ2VzIGZyb20gdjEgdG8gdjI6CgoqIEFkZCBUT0tFTl9TRUNS RVRfQ0FDSEVfVFRMX1NFQ1MgYW5kIGxhc3RfY2hlY2tlZC4KKiBJbXBsZW1lbnQgZG91YmxlLWNo ZWNrZWQgVFRMOiBjaGVjayB3aXRoIHRyeV9yZWFkIGZpcnN0OyBvbmx5IGF0dGVtcHQKICByZWZy ZXNoIHdpdGggdHJ5X3dyaXRlIGlmIGV4cGlyZWQvdW5rbm93bi4KKiBGaXggVFRMIGJvb2trZWVw aW5nOiB1cGRhdGUgbGFzdF9jaGVja2VkIG9uIHRoZSDigJxmaWxlIHVuY2hhbmdlZOKAnSBwYXRo CiAgYW5kIGFmdGVyIEFQSSBtdXRhdGlvbnMuCiogQWRkIGRvY3VtZW50YXRpb24gd2FybmluZyBh Ym91dCBUVEwtZGVsYXllZCBlZmZlY3Qgb2YgbWFudWFsCiAgdG9rZW4uc2hhZG93IGVkaXRzLgoK Q2hhbmdlcyBmcm9tIHYyIHRvIHYzOgoKKiBSZWZhY3RvcmVkIHJlZnJlc2hfY2FjaGVfaWZfZmls ZV9jaGFuZ2VkIFRUTCBsb2dpYy4KKiBSZW1vdmUgaGFkX3ByaW9yX3N0YXRlIGNoZWNrIChyZXBs YWNlZCBieSBsYXN0X2NoZWNrZWQgbG9naWMpLgoqIEltcHJvdmUgVFRMIGJvdW5kIGNoZWNrcy4K KiBSZXdvcmQgZG9jdW1lbnRhdGlvbiB3YXJuaW5nIGZvciBjbGFyaXR5LgoKIGRvY3MvdXNlci1t YW5hZ2VtZW50LnJzdCAgICAgICB8ICA0ICsrKysKIHBicy1jb25maWcvc3JjL3Rva2VuX3NoYWRv dy5ycyB8IDI5ICsrKysrKysrKysrKysrKysrKysrKysrKysrKystCiAyIGZpbGVzIGNoYW5nZWQs IDMyIGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9kb2NzL3VzZXIt bWFuYWdlbWVudC5yc3QgYi9kb2NzL3VzZXItbWFuYWdlbWVudC5yc3QKaW5kZXggNDFiNDNkNjAu LjhkZmFlNTI4IDEwMDY0NAotLS0gYS9kb2NzL3VzZXItbWFuYWdlbWVudC5yc3QKKysrIGIvZG9j cy91c2VyLW1hbmFnZW1lbnQucnN0CkBAIC0xNTYsNiArMTU2LDEwIEBAIG1ldGFkYXRhOgogU2lt aWxhcmx5LCB0aGUgYGB1c2VyIGRlbGV0ZS10b2tlbmBgIHN1YmNvbW1hbmQgY2FuIGJlIHVzZWQg dG8gZGVsZXRlIGEgdG9rZW4KIGFnYWluLgogCisuLiBXQVJOSU5HOjogRGlyZWN0L21hbnVhbCBl ZGl0cyB0byBgYHRva2VuLnNoYWRvd2BgIG1heSB0YWtlIHVwIHRvIDYwIHNlY29uZHMgKG9yCisg ICBsb25nZXIgaW4gZWRnZSBjYXNlcykgdG8gdGFrZSBlZmZlY3QgZHVlIHRvIGNhY2hpbmcuIFJl c3RhcnQgc2VydmljZXMgZm9yCisgICBpbW1lZGlhdGUgZWZmZWN0IG9mIG1hbnVhbCBlZGl0cy4K KwogTmV3bHkgZ2VuZXJhdGVkIEFQSSB0b2tlbnMgZG9uJ3QgaGF2ZSBhbnkgcGVybWlzc2lvbnMu IFBsZWFzZSByZWFkIHRoZSBuZXh0CiBzZWN0aW9uIHRvIGxlYXJuIGhvdyB0byBzZXQgYWNjZXNz IHBlcm1pc3Npb25zLgogCmRpZmYgLS1naXQgYS9wYnMtY29uZmlnL3NyYy90b2tlbl9zaGFkb3cu cnMgYi9wYnMtY29uZmlnL3NyYy90b2tlbl9zaGFkb3cucnMKaW5kZXggMDJmYjE5MWIuLmUzNTI5 YjQwIDEwMDY0NAotLS0gYS9wYnMtY29uZmlnL3NyYy90b2tlbl9zaGFkb3cucnMKKysrIGIvcGJz LWNvbmZpZy9zcmMvdG9rZW5fc2hhZG93LnJzCkBAIC0zMyw2ICszMyw4IEBAIHN0YXRpYyBUT0tF Tl9TRUNSRVRfQ0FDSEU6IExhenlMb2NrPFJ3TG9jazxBcGlUb2tlblNlY3JldENhY2hlPj4gPSBM YXp5TG9jazo6bmV3CiAgICAgICAgIGxhc3RfY2hlY2tlZDogTm9uZSwKICAgICB9KQogfSk7Cisv Ly8gTWF4IGFnZSBpbiBzZWNvbmRzIG9mIHRoZSB0b2tlbiBzZWNyZXQgY2FjaGUgYmVmb3JlIGNo ZWNraW5nIGZvciBmaWxlIGNoYW5nZXMuCitjb25zdCBUT0tFTl9TRUNSRVRfQ0FDSEVfVFRMX1NF Q1M6IGk2NCA9IDYwOwogCiAjW2Rlcml2ZShTZXJpYWxpemUsIERlc2VyaWFsaXplKV0KICNbc2Vy ZGUocmVuYW1lX2FsbCA9ICJrZWJhYi1jYXNlIildCkBAIC03NCwxMSArNzYsMjggQEAgZm4gd3Jp dGVfZmlsZShkYXRhOiBIYXNoTWFwPEF1dGhpZCwgU3RyaW5nPikgLT4gUmVzdWx0PCgpLCBFcnJv cj4gewogZm4gcmVmcmVzaF9jYWNoZV9pZl9maWxlX2NoYW5nZWQoKSAtPiBib29sIHsKICAgICBs ZXQgbm93ID0gZXBvY2hfaTY0KCk7CiAKLSAgICAvLyBCZXN0LWVmZm9ydCByZWZyZXNoIHVuZGVy IHdyaXRlIGxvY2suCisgICAgLy8gRmFzdCBwYXRoOiBjYWNoZSBpcyBmcmVzaCBpZiBzaGFyZWQt Z2VuIG1hdGNoZXMgYW5kIFRUTCBub3QgZXhwaXJlZC4KKyAgICBpZiBsZXQgKFNvbWUoY2FjaGUp LCBTb21lKHNoYXJlZF9nZW5fcmVhZCkpID0KKyAgICAgICAgKFRPS0VOX1NFQ1JFVF9DQUNIRS50 cnlfcmVhZCgpLCB0b2tlbl9zaGFkb3dfc2hhcmVkX2dlbigpKQorICAgIHsKKyAgICAgICAgaWYg Y2FjaGUuc2hhcmVkX2dlbiA9PSBzaGFyZWRfZ2VuX3JlYWQKKyAgICAgICAgICAgICYmIGNhY2hl CisgICAgICAgICAgICAgICAgLmxhc3RfY2hlY2tlZAorICAgICAgICAgICAgICAgIC5pc19zb21l X2FuZCh8bGFzdHwgbm93ID49IGxhc3QgJiYgKG5vdyAtIGxhc3QpIDwgVE9LRU5fU0VDUkVUX0NB Q0hFX1RUTF9TRUNTKQorICAgICAgICB7CisgICAgICAgICAgICByZXR1cm4gdHJ1ZTsKKyAgICAg ICAgfQorICAgICAgICAvLyByZWFkIGxvY2sgZHJvcHMgaGVyZQorICAgIH0gZWxzZSB7CisgICAg ICAgIHJldHVybiBmYWxzZTsKKyAgICB9CisKKyAgICAvLyBTbG93IHBhdGg6IGJlc3QtZWZmb3J0 IHJlZnJlc2ggdW5kZXIgd3JpdGUgbG9jay4KICAgICBsZXQgU29tZShtdXQgY2FjaGUpID0gVE9L RU5fU0VDUkVUX0NBQ0hFLnRyeV93cml0ZSgpIGVsc2UgewogICAgICAgICByZXR1cm4gZmFsc2U7 CiAgICAgfTsKIAorICAgIC8vIFJlLXJlYWQgZ2VuZXJhdGlvbiBhZnRlciBhY3F1aXJpbmcgdGhl IGxvY2sgKG1heSBoYXZlIGNoYW5nZWQgbWVhbndoaWxlKS4KICAgICBsZXQgU29tZShzaGFyZWRf Z2VuX25vdykgPSB0b2tlbl9zaGFkb3dfc2hhcmVkX2dlbigpIGVsc2UgewogICAgICAgICByZXR1 cm4gZmFsc2U7CiAgICAgfTsKQEAgLTg5LDYgKzEwOCwxNCBAQCBmbiByZWZyZXNoX2NhY2hlX2lm X2ZpbGVfY2hhbmdlZCgpIC0+IGJvb2wgewogICAgICAgICBjYWNoZS5zaGFyZWRfZ2VuID0gc2hh cmVkX2dlbl9ub3c7CiAgICAgfQogCisgICAgLy8gVFRMIGNoZWNrIGFnYWluIGFmdGVyIGFjcXVp cmluZyB0aGUgbG9jaworICAgIGlmIGNhY2hlCisgICAgICAgIC5sYXN0X2NoZWNrZWQKKyAgICAg ICAgLmlzX3NvbWVfYW5kKHxsYXN0fCBub3cgPj0gbGFzdCAmJiAobm93IC0gbGFzdCkgPCBUT0tF Tl9TRUNSRVRfQ0FDSEVfVFRMX1NFQ1MpCisgICAgeworICAgICAgICByZXR1cm4gdHJ1ZTsKKyAg ICB9CisKICAgICAvLyBTdGF0IHRoZSBmaWxlIHRvIGRldGVjdCBtYW51YWwgZWRpdHMuCiAgICAg bGV0IE9rKChuZXdfbXRpbWUsIG5ld19sZW4pKSA9IHNoYWRvd19tdGltZV9sZW4oKSBlbHNlIHsK ICAgICAgICAgcmV0dXJuIGZhbHNlOwotLSAKMi40Ny4zCgoKCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fCnBicy1kZXZlbCBtYWlsaW5nIGxpc3QKcGJzLWRl dmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJpbi9t YWlsbWFuL2xpc3RpbmZvL3Bicy1kZXZlbAo=