From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 3879A1FF15E for ; Wed, 21 Jan 2026 16:14:00 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 381362353; Wed, 21 Jan 2026 16:14:18 +0100 (CET) From: Samuel Rufinatscha To: pbs-devel@lists.proxmox.com Date: Wed, 21 Jan 2026 16:14:00 +0100 Message-ID: <20260121151408.731516-5-s.rufinatscha@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260121151408.731516-1-s.rufinatscha@proxmox.com> References: <20260121151408.731516-1-s.rufinatscha@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1769008396987 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.267 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pbs-devel] [PATCH proxmox-backup v4 4/4] pbs-config: add TTL window to token secret cache X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" VmVyaWZ5X3NlY3JldCgpIGN1cnJlbnRseSBjYWxscyByZWZyZXNoX2NhY2hlX2lmX2ZpbGVfY2hh bmdlZCgpIG9uIGV2ZXJ5CnJlcXVlc3QsIHdoaWNoIHBlcmZvcm1zIGEgbWV0YWRhdGEoKSBjYWxs IG9uIHRva2VuLnNoYWRvdyBlYWNoIHRpbWUuClVuZGVyIGxvYWQgdGhpcyBhZGRzIHVubmVjZXNz YXJ5IG92ZXJoZWFkLCBjb25zaWRlcmluZyBhbHNvIHRoZSBmaWxlCnVzdWFsbHkgc2hvdWxkIHJh cmVseSBjaGFuZ2UuCgpUaGlzIHBhdGNoIGludHJvZHVjZXMgYSBUVEwgYm91bmRhcnksIGNvbnRy b2xsZWQgYnkKVE9LRU5fU0VDUkVUX0NBQ0hFX1RUTF9TRUNTLiBGaWxlIG1ldGFkYXRhIGlzIG9u bHkgcmUtbG9hZGVkIG9uY2UgdGhlClRUTCBoYXMgZXhwaXJlZDsgZG9jdW1lbnRzIFRUTCBlZmZl Y3RzLgoKU2lnbmVkLW9mZi1ieTogU2FtdWVsIFJ1ZmluYXRzY2hhIDxzLnJ1ZmluYXRzY2hhQHBy b3htb3guY29tPgotLS0KQ2hhbmdlcyBmcm9tIHYzIHRvIDQ6CiogQWRqdXN0ZWQgY29tbWl0IG1l c3NhZ2UKCkNoYW5nZXMgZnJvbSB2MiB0byB2MzoKKiBSZWZhY3RvcmVkIHJlZnJlc2hfY2FjaGVf aWZfZmlsZV9jaGFuZ2VkIFRUTCBsb2dpYy4KKiBSZW1vdmUgaGFkX3ByaW9yX3N0YXRlIGNoZWNr IChyZXBsYWNlZCBieSBsYXN0X2NoZWNrZWQgbG9naWMpLgoqIEltcHJvdmUgVFRMIGJvdW5kIGNo ZWNrcy4KKiBSZXdvcmQgZG9jdW1lbnRhdGlvbiB3YXJuaW5nIGZvciBjbGFyaXR5LgoKQ2hhbmdl cyBmcm9tIHYxIHRvIHYyOgoqIEFkZCBUT0tFTl9TRUNSRVRfQ0FDSEVfVFRMX1NFQ1MgYW5kIGxh c3RfY2hlY2tlZC4KKiBJbXBsZW1lbnQgZG91YmxlLWNoZWNrZWQgVFRMOiBjaGVjayB3aXRoIHRy eV9yZWFkIGZpcnN0OyBvbmx5IGF0dGVtcHQKICByZWZyZXNoIHdpdGggdHJ5X3dyaXRlIGlmIGV4 cGlyZWQvdW5rbm93bi4KKiBGaXggVFRMIGJvb2trZWVwaW5nOiB1cGRhdGUgbGFzdF9jaGVja2Vk IG9uIHRoZSDigJxmaWxlIHVuY2hhbmdlZOKAnSBwYXRoCiAgYW5kIGFmdGVyIEFQSSBtdXRhdGlv bnMuCiogQWRkIGRvY3VtZW50YXRpb24gd2FybmluZyBhYm91dCBUVEwtZGVsYXllZCBlZmZlY3Qg b2YgbWFudWFsCiAgdG9rZW4uc2hhZG93IGVkaXRzLgoKIGRvY3MvdXNlci1tYW5hZ2VtZW50LnJz dCAgICAgICB8ICA0ICsrKysKIHBicy1jb25maWcvc3JjL3Rva2VuX3NoYWRvdy5ycyB8IDI5ICsr KysrKysrKysrKysrKysrKysrKysrKysrKystCiAyIGZpbGVzIGNoYW5nZWQsIDMyIGluc2VydGlv bnMoKyksIDEgZGVsZXRpb24oLSkKCmRpZmYgLS1naXQgYS9kb2NzL3VzZXItbWFuYWdlbWVudC5y c3QgYi9kb2NzL3VzZXItbWFuYWdlbWVudC5yc3QKaW5kZXggNDFiNDNkNjAuLjhkZmFlNTI4IDEw MDY0NAotLS0gYS9kb2NzL3VzZXItbWFuYWdlbWVudC5yc3QKKysrIGIvZG9jcy91c2VyLW1hbmFn ZW1lbnQucnN0CkBAIC0xNTYsNiArMTU2LDEwIEBAIG1ldGFkYXRhOgogU2ltaWxhcmx5LCB0aGUg YGB1c2VyIGRlbGV0ZS10b2tlbmBgIHN1YmNvbW1hbmQgY2FuIGJlIHVzZWQgdG8gZGVsZXRlIGEg dG9rZW4KIGFnYWluLgogCisuLiBXQVJOSU5HOjogRGlyZWN0L21hbnVhbCBlZGl0cyB0byBgYHRv a2VuLnNoYWRvd2BgIG1heSB0YWtlIHVwIHRvIDYwIHNlY29uZHMgKG9yCisgICBsb25nZXIgaW4g ZWRnZSBjYXNlcykgdG8gdGFrZSBlZmZlY3QgZHVlIHRvIGNhY2hpbmcuIFJlc3RhcnQgc2Vydmlj ZXMgZm9yCisgICBpbW1lZGlhdGUgZWZmZWN0IG9mIG1hbnVhbCBlZGl0cy4KKwogTmV3bHkgZ2Vu ZXJhdGVkIEFQSSB0b2tlbnMgZG9uJ3QgaGF2ZSBhbnkgcGVybWlzc2lvbnMuIFBsZWFzZSByZWFk IHRoZSBuZXh0CiBzZWN0aW9uIHRvIGxlYXJuIGhvdyB0byBzZXQgYWNjZXNzIHBlcm1pc3Npb25z LgogCmRpZmYgLS1naXQgYS9wYnMtY29uZmlnL3NyYy90b2tlbl9zaGFkb3cucnMgYi9wYnMtY29u ZmlnL3NyYy90b2tlbl9zaGFkb3cucnMKaW5kZXggYTViZDE1MjUuLjI0NjMzZjZlIDEwMDY0NAot LS0gYS9wYnMtY29uZmlnL3NyYy90b2tlbl9zaGFkb3cucnMKKysrIGIvcGJzLWNvbmZpZy9zcmMv dG9rZW5fc2hhZG93LnJzCkBAIC0zMSw2ICszMSw4IEBAIHN0YXRpYyBUT0tFTl9TRUNSRVRfQ0FD SEU6IExhenlMb2NrPFJ3TG9jazxBcGlUb2tlblNlY3JldENhY2hlPj4gPSBMYXp5TG9jazo6bmV3 CiAgICAgICAgIHNoYWRvdzogTm9uZSwKICAgICB9KQogfSk7CisvLy8gTWF4IGFnZSBpbiBzZWNv bmRzIG9mIHRoZSB0b2tlbiBzZWNyZXQgY2FjaGUgYmVmb3JlIGNoZWNraW5nIGZvciBmaWxlIGNo YW5nZXMuCitjb25zdCBUT0tFTl9TRUNSRVRfQ0FDSEVfVFRMX1NFQ1M6IGk2NCA9IDYwOwogCiAj W2Rlcml2ZShTZXJpYWxpemUsIERlc2VyaWFsaXplKV0KICNbc2VyZGUocmVuYW1lX2FsbCA9ICJr ZWJhYi1jYXNlIildCkBAIC03MiwxMSArNzQsMjkgQEAgZm4gd3JpdGVfZmlsZShkYXRhOiBIYXNo TWFwPEF1dGhpZCwgU3RyaW5nPikgLT4gUmVzdWx0PCgpLCBFcnJvcj4gewogZm4gcmVmcmVzaF9j YWNoZV9pZl9maWxlX2NoYW5nZWQoKSAtPiBib29sIHsKICAgICBsZXQgbm93ID0gZXBvY2hfaTY0 KCk7CiAKLSAgICAvLyBCZXN0LWVmZm9ydCByZWZyZXNoIHVuZGVyIHdyaXRlIGxvY2suCisgICAg Ly8gRmFzdCBwYXRoOiBjYWNoZSBpcyBmcmVzaCBpZiBzaGFyZWQtZ2VuIG1hdGNoZXMgYW5kIFRU TCBub3QgZXhwaXJlZC4KKyAgICBpZiBsZXQgKFNvbWUoY2FjaGUpLCBTb21lKHNoYXJlZF9nZW5f cmVhZCkpID0KKyAgICAgICAgKFRPS0VOX1NFQ1JFVF9DQUNIRS50cnlfcmVhZCgpLCB0b2tlbl9z aGFkb3dfc2hhcmVkX2dlbigpKQorICAgIHsKKyAgICAgICAgaWYgY2FjaGUuc2hhcmVkX2dlbiA9 PSBzaGFyZWRfZ2VuX3JlYWQKKyAgICAgICAgICAgICYmIGNhY2hlLnNoYWRvdy5hc19yZWYoKS5p c19zb21lX2FuZCh8Y2FjaGVkfCB7CisgICAgICAgICAgICAgICAgbm93ID49IGNhY2hlZC5sYXN0 X2NoZWNrZWQKKyAgICAgICAgICAgICAgICAgICAgJiYgKG5vdyAtIGNhY2hlZC5sYXN0X2NoZWNr ZWQpIDwgVE9LRU5fU0VDUkVUX0NBQ0hFX1RUTF9TRUNTCisgICAgICAgICAgICB9KQorICAgICAg ICB7CisgICAgICAgICAgICByZXR1cm4gdHJ1ZTsKKyAgICAgICAgfQorICAgICAgICAvLyByZWFk IGxvY2sgZHJvcHMgaGVyZQorICAgIH0gZWxzZSB7CisgICAgICAgIHJldHVybiBmYWxzZTsKKyAg ICB9CisKKyAgICAvLyBTbG93IHBhdGg6IGJlc3QtZWZmb3J0IHJlZnJlc2ggdW5kZXIgd3JpdGUg bG9jay4KICAgICBsZXQgU29tZShtdXQgY2FjaGUpID0gVE9LRU5fU0VDUkVUX0NBQ0hFLnRyeV93 cml0ZSgpIGVsc2UgewogICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgfTsKIAorICAgIC8vIFJl LXJlYWQgZ2VuZXJhdGlvbiBhZnRlciBhY3F1aXJpbmcgdGhlIGxvY2sgKG1heSBoYXZlIGNoYW5n ZWQgbWVhbndoaWxlKS4KICAgICBsZXQgU29tZShzaGFyZWRfZ2VuX25vdykgPSB0b2tlbl9zaGFk b3dfc2hhcmVkX2dlbigpIGVsc2UgewogICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgfTsKQEAg LTg2LDYgKzEwNiwxMyBAQCBmbiByZWZyZXNoX2NhY2hlX2lmX2ZpbGVfY2hhbmdlZCgpIC0+IGJv b2wgewogICAgICAgICBpbnZhbGlkYXRlX2NhY2hlX3N0YXRlX2FuZF9zZXRfZ2VuKCZtdXQgY2Fj aGUsIHNoYXJlZF9nZW5fbm93KTsKICAgICB9CiAKKyAgICAvLyBUVEwgY2hlY2sgYWdhaW4gYWZ0 ZXIgYWNxdWlyaW5nIHRoZSBsb2NrCisgICAgaWYgY2FjaGUuc2hhZG93LmFzX3JlZigpLmlzX3Nv bWVfYW5kKHxjYWNoZWR8IHsKKyAgICAgICAgbm93ID49IGNhY2hlZC5sYXN0X2NoZWNrZWQgJiYg KG5vdyAtIGNhY2hlZC5sYXN0X2NoZWNrZWQpIDwgVE9LRU5fU0VDUkVUX0NBQ0hFX1RUTF9TRUNT CisgICAgfSkgeworICAgICAgICByZXR1cm4gdHJ1ZTsKKyAgICB9CisKICAgICAvLyBTdGF0IHRo ZSBmaWxlIHRvIGRldGVjdCBtYW51YWwgZWRpdHMuCiAgICAgbGV0IE9rKChuZXdfbXRpbWUsIG5l d19sZW4pKSA9IHNoYWRvd19tdGltZV9sZW4oKSBlbHNlIHsKICAgICAgICAgcmV0dXJuIGZhbHNl OwotLSAKMi40Ny4zCgoKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fCnBicy1kZXZlbCBtYWlsaW5nIGxpc3QKcGJzLWRldmVsQGxpc3RzLnByb3htb3guY29t Cmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3Bicy1k ZXZlbAo=