From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gate001.proxmox.com (gate001.proxmox.com [45.144.208.40]) by lore.proxmox.com (Postfix) with ESMTPS id 1F4C01FF0E1 for ; Mon, 10 Aug 2026 14:36:16 +0200 (CEST) Received: from gate001.proxmox.com (localhost.localdomain [127.0.0.1]) by gate001.proxmox.com (Proxmox) with ESMTP id B6E9521682; Mon, 10 Aug 2026 14:36:15 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=azharul.com; s=t28hkp5; t=1786340273; x=1786945073; darn=lists.proxmox.com; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=4byUmb97wO2oUhskc/6tjIIcXIwLOV7b7Oxod1GDtWI=; b=EEQo13DrRw4Xvlb2YPxGiNgUPg8oEmUlZgLToDim+6QBwo9RI7dle8XLKmdkoB+HIY nk/95NCpAPkBLAL22kSmZTsJ8HwscE6eUR4cCA3V/4mGVdVvfhY95RJVSI6fvpxyiDqL g6a9LkwSgPpPv0jFUiiKKD81ZgH4nByZlr5+hN8krt4C2CDYzp/e9a3l4v+x3+b7GMrN Q/2o70YevPqKRGkQ8yMC67kMGXuaf+kByx1KPv7fJLOan3L1TDVGKYf+zhKYZ/VIfiAB 5V199YF1eXV9JyUHBTcCYQH3Pl7RhO5n56qPDkhua3/fY/Rp6McFEUwCdhn+sss0+JGs 03MA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786340273; x=1786945073; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4byUmb97wO2oUhskc/6tjIIcXIwLOV7b7Oxod1GDtWI=; b=eHMyyCtIPJy2J2VULJWKGApV2v1YcT6oAQrZIqe7bwW6KVtrjfaiVPlfPBibyWgr4t /IMk6Gd615jxDLeKL+lJo9+4jJB1r21YN6Ar+Aw7azfkBYkVJw2xqtUyBE61izYUDgfp flSGOup71A4HiIXqfLG5WkhslO3ehq5ro19U8GsQ2K+LG6xf365RROYrgLLoakNxzcKe 7QokLIFXphHnvzX7Cpi2vC3Ms2HEI0Xs4oN0mAwm+GvZmVEm2Bx9VNzM8tGMS00baw9h UdHZy634PhJvZXVy0oqeOl/ONqzDz8imtKlt0D9HDWOUwhCnAwiiDQ0sxWGol0Jktcou pQbQ== X-Gm-Message-State: AOJu0YymUrYt/k67VU2IB8nKuRvnB+cVIMOZqvQVq+Kdacm+u0XpWHwT 95CVUVWv2ebbg+lA+lvF1S/mMfIsv7heME6cUdKcWQjanul+EfNQq/Pk6o0SGhNBidYAfFP33zW 0cv8jsQ== X-Gm-Gg: AR+sD10d07kHEefB5pURbEHWGFnKrYECd3egLW6OwHyedFMptIdcQM40+nz5hG1YlrA ZZ5PWZ3EqQlA9FvmfqtIYMwWyjav0mRxSwQaq3sCSJWkTwsUoztEs8/McJljkoiVSTB6jkwnx8i nGF27ruiLm1703KLO6e7PUCZTEWoykGRJ29zB0RElt1rwRxqKvIndVO1XFb44FlAJu2H43UWB9y w9M+l+rbWnB+msIKhQoT7CI2XZEUyV/8NC2QAPAVf892s4zoZJ/2gv8iQnddHGU6iwlhaDaQaCX /5VIMYA4c3/OqraiOTRj9O28PiWUIy+1Z+2pfED2nL3QUas6Kfs1clWVVD1XfMDqo2CL0FrHUk6 N1wiikLp2lcRtn6+GYOr/ooIu0CoVdDFhP4/My0TftiUq/ZYLPpR/LzETRitTYlih+BfR5VgVyV hU8odmsUWdCnwkaBDBauv5MUPw1ijLncc7yiLeWK+EwFbl1i08kCSDARU/lfPMOKl4OYZ6L+N9T AmfCeZWebz+3Amp0lHO2eDwPkK3otMDGwhTr+qejkrArvUq/KN8EH3nrWM+FH7u6yikPgEYwNMU ExmcbtzMaKr/m86CUVBf55YnOkqWXAXqYk5mWGkhD7AfzBpwRXWxGEVDWEN/taCGyYaBT/tosJ2 BsN7rSiUMbyzhvPTbrP8yjEaFzoA= X-Received: by 2002:a05:620a:2d8b:b0:92e:46cd:72a0 with SMTP id af79cd13be357-9367978eff5mr1205915485a.6.1786340273334; Sun, 09 Aug 2026 22:37:53 -0700 (PDT) From: Azharul Haque To: pve-devel@lists.proxmox.com Subject: [PATCH 0/2] access: add OpenID Connect support for #4281 Date: Mon, 10 Aug 2026 01:37:30 -0400 Message-ID: <20260810053732.16627-1-haque@azharul.com> X-Mailer: git-send-email 2.50.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-SPAM-LEVEL: Spam detection results: 0 DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_PASS -0.1 DMARC pass policy POISEN_SPAM_PILL 0.1 Meta: its spam POISEN_SPAM_PILL_1 0.1 random spam to be learned in bayes POISEN_SPAM_PILL_3 0.1 random spam to be learned in bayes RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record X-MailFrom: haque@azharul.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation Message-ID-Hash: SVUK5A2BVTQLA4KN3PGGHM2PJXZWRHK6 X-Message-ID-Hash: SVUK5A2BVTQLA4KN3PGGHM2PJXZWRHK6 X-Mailman-Approved-At: Mon, 10 Aug 2026 14:36:15 +0200 CC: haque@azharul.com X-Mailman-Version: 3.3.10 Precedence: list List-Id: Proxmox VE development discussion List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: The native Flutter "Proxmox VE Companion" app never implemented OpenID Connect / OAuth realm login (bug #4281[0]): selecting an OAuth realm just showed username/password fields that could never work. This series adds the API-layer building blocks for OIDC login: - a `type` property on PveAccessDomainModel, needed to detect OpenID realms in the login UI - helpers for PVE's /access/openid/auth-url and /access/openid/login endpoints A companion series to proxmox_login_manager builds the login UI and OAuth flow on top of this, and a companion series to pve_flutter_frontend wires up the Android-side callback activity. Verified end-to-end against a real PVE server with an Authentik OIDC realm, on both Android and iOS. [0] https://bugzilla.proxmox.com/show_bug.cgi?id=4281 Azharul Haque (2): fix #4281: access: add `type` property to `PveAccessDomainModel` fix #4281: access: add OpenID Connect auth-url/login helpers lib/src/authenticate.dart | 85 +++++++++++++++++++++ lib/src/handle_ticket_response.dart | 36 +++++++++ lib/src/models/pve_access_domain_model.dart | 2 + test/test.dart | 20 +++++ 4 files changed, 143 insertions(+) -- 2.50.1 (Apple Git-155)