From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id BEB361FF183 for ; Wed, 17 Dec 2025 17:25:23 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 9454A914A; Wed, 17 Dec 2025 17:26:11 +0100 (CET) From: Samuel Rufinatscha To: pbs-devel@lists.proxmox.com Date: Wed, 17 Dec 2025 17:25:14 +0100 Message-ID: <20251217162520.486520-4-s.rufinatscha@proxmox.com> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20251217162520.486520-1-s.rufinatscha@proxmox.com> References: <20251217162520.486520-1-s.rufinatscha@proxmox.com> MIME-Version: 1.0 X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1765988726679 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.268 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [proxmox.com] Subject: [pbs-devel] [PATCH proxmox-backup v2 3/3] pbs-config: add TTL window to token secret cache X-BeenThere: pbs-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Backup Server development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Backup Server development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pbs-devel-bounces@lists.proxmox.com Sender: "pbs-devel" VmVyaWZ5X3NlY3JldCgpIGN1cnJlbnRseSBjYWxscyByZWZyZXNoX2NhY2hlX2lmX2ZpbGVfY2hh bmdlZCgpIG9uIGV2ZXJ5CnJlcXVlc3QsIHdoaWNoIHBlcmZvcm1zIGEgbWV0YWRhdGEoKSBjYWxs IG9uIHRva2VuLnNoYWRvdyBlYWNoIHRpbWUuClVuZGVyIGxvYWQgdGhpcyBhZGRzIHVubmVjZXNz YXJ5IG92ZXJoZWFkLCBjb25zaWRlcmluZyBhbHNvIHRoZSBmaWxlCnVzdWFsbHkgc2hvdWxkIHJh cmVseSBjaGFuZ2UuCgpUaGlzIHBhdGNoIGludHJvZHVjZXMgYSBUVEwgYm91bmRhcnksIGNvbnRy b2xsZWQgYnkKVE9LRU5fU0VDUkVUX0NBQ0hFX1RUTF9TRUNTLiBGaWxlIG1ldGFkYXRhIGlzIG9u bHkgcmUtbG9hZGVkIG9uY2UgdGhlClRUTCBoYXMgZXhwaXJlZC4gRG9jdW1lbnRzIFRUTCBlZmZl Y3RzLgoKVGhpcyBwYXRjaCBwYXJ0bHkgZml4ZXMgYnVnICM3MDE3IFsxXS4KClsxXSBodHRwczov L2J1Z3ppbGxhLnByb3htb3guY29tL3Nob3dfYnVnLmNnaT9pZD03MDE3CgpTaWduZWQtb2ZmLWJ5 OiBTYW11ZWwgUnVmaW5hdHNjaGEgPHMucnVmaW5hdHNjaGFAcHJveG1veC5jb20+Ci0tLQpDaGFu Z2VzIGZyb20gdjEgdG8gdjI6Ci0gQWRkIFRPS0VOX1NFQ1JFVF9DQUNIRV9UVExfU0VDUyBhbmQg bGFzdF9jaGVja2VkLgotIEltcGxlbWVudCBkb3VibGUtY2hlY2tlZCBUVEw6IGNoZWNrIHdpdGgg dHJ5X3JlYWQgZmlyc3Q7IG9ubHkgYXR0ZW1wdAogIHJlZnJlc2ggd2l0aCB0cnlfd3JpdGUgaWYg ZXhwaXJlZC91bmtub3duLgotIEZpeCBUVEwgYm9va2tlZXBpbmc6IHVwZGF0ZSBsYXN0X2NoZWNr ZWQgb24gdGhlIOKAnGZpbGUgdW5jaGFuZ2Vk4oCdIHBhdGgKICBhbmQgYWZ0ZXIgQVBJIG11dGF0 aW9ucy4KLSBBZGQgZG9jdW1lbnRhdGlvbiB3YXJuaW5nIGFib3V0IFRUTC1kZWxheWVkIGVmZmVj dCBvZiBtYW51YWwKICB0b2tlbi5zaGFkb3cgZWRpdHMuCgogZG9jcy91c2VyLW1hbmFnZW1lbnQu cnN0ICAgICAgIHwgIDQgKysrKwogcGJzLWNvbmZpZy9zcmMvdG9rZW5fc2hhZG93LnJzIHwgNDIg KysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrLQogMiBmaWxlcyBjaGFuZ2VkLCA0NSBp bnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCgpkaWZmIC0tZ2l0IGEvZG9jcy91c2VyLW1hbmFn ZW1lbnQucnN0IGIvZG9jcy91c2VyLW1hbmFnZW1lbnQucnN0CmluZGV4IDQxYjQzZDYwLi4zMmE5 ZWMyOSAxMDA2NDQKLS0tIGEvZG9jcy91c2VyLW1hbmFnZW1lbnQucnN0CisrKyBiL2RvY3MvdXNl ci1tYW5hZ2VtZW50LnJzdApAQCAtMTU2LDYgKzE1NiwxMCBAQCBtZXRhZGF0YToKIFNpbWlsYXJs eSwgdGhlIGBgdXNlciBkZWxldGUtdG9rZW5gYCBzdWJjb21tYW5kIGNhbiBiZSB1c2VkIHRvIGRl bGV0ZSBhIHRva2VuCiBhZ2Fpbi4KIAorLi4gV0FSTklORzo6IElmIHlvdSBtYW51YWxseSByZW1v dmUgYSBnZW5lcmF0ZWQgQVBJIHRva2VuIGZyb20gdGhlIHRva2VuIHNlY3JldHMKKyAgIGZpbGUg KHRva2VuLnNoYWRvdyksIGl0IGNhbiB0YWtlIHVwIHRvIG9uZSBtaW51dGUgYmVmb3JlIHRoZSB0 b2tlbiBpcworICAgcmVqZWN0ZWQuIFRoaXMgaXMgZHVlIHRvIGNhY2hpbmcuCisKIE5ld2x5IGdl bmVyYXRlZCBBUEkgdG9rZW5zIGRvbid0IGhhdmUgYW55IHBlcm1pc3Npb25zLiBQbGVhc2UgcmVh ZCB0aGUgbmV4dAogc2VjdGlvbiB0byBsZWFybiBob3cgdG8gc2V0IGFjY2VzcyBwZXJtaXNzaW9u cy4KIApkaWZmIC0tZ2l0IGEvcGJzLWNvbmZpZy9zcmMvdG9rZW5fc2hhZG93LnJzIGIvcGJzLWNv bmZpZy9zcmMvdG9rZW5fc2hhZG93LnJzCmluZGV4IDcxNTUzYWFlLi43OTk0MGZkNSAxMDA2NDQK LS0tIGEvcGJzLWNvbmZpZy9zcmMvdG9rZW5fc2hhZG93LnJzCisrKyBiL3Bicy1jb25maWcvc3Jj L3Rva2VuX3NoYWRvdy5ycwpAQCAtMTEsNiArMTEsNyBAQCB1c2Ugc2VyZGU6OntEZXNlcmlhbGl6 ZSwgU2VyaWFsaXplfTsKIHVzZSBzZXJkZV9qc29uOjp7ZnJvbV92YWx1ZSwgVmFsdWV9OwogCiB1 c2UgcHJveG1veF9zeXM6OmZzOjpDcmVhdGVPcHRpb25zOwordXNlIHByb3htb3hfdGltZTo6ZXBv Y2hfaTY0OwogCiB1c2UgcGJzX2FwaV90eXBlczo6QXV0aGlkOwogLy91c2UgY3JhdGU6OmF1dGg7 CkBAIC0yOSwxMiArMzAsMTUgQEAgc3RhdGljIFRPS0VOX1NFQ1JFVF9DQUNIRTogTGF6eUxvY2s8 UndMb2NrPEFwaVRva2VuU2VjcmV0Q2FjaGU+PiA9IExhenlMb2NrOjpuZXcKICAgICAgICAgc2Vj cmV0czogSGFzaE1hcDo6bmV3KCksCiAgICAgICAgIGZpbGVfbXRpbWU6IE5vbmUsCiAgICAgICAg IGZpbGVfbGVuOiBOb25lLAorICAgICAgICBsYXN0X2NoZWNrZWQ6IE5vbmUsCiAgICAgfSkKIH0p OwogLy8vIEFQSSBtdXRhdGlvbiBnZW5lcmF0aW9uIChzZXQvZGVsZXRlKQogc3RhdGljIEFQSV9N VVRBVElPTl9HRU5FUkFUSU9OOiBBdG9taWNVNjQgPSBBdG9taWNVNjQ6Om5ldygwKTsKIC8vLyBF eHRlcm5hbC9tYW51YWwgZWRpdHMgZ2VuZXJhdGlvbiBmb3IgdGhlIHRva2VuLnNoYWRvdyBmaWxl CiBzdGF0aWMgRklMRV9HRU5FUkFUSU9OOiBBdG9taWNVNjQgPSBBdG9taWNVNjQ6Om5ldygwKTsK Ky8vLyBNYXggYWdlIGluIHNlY29uZHMgb2YgdGhlIHRva2VuIHNlY3JldCBjYWNoZSBiZWZvcmUg Y2hlY2tpbmcgZm9yIGZpbGUgY2hhbmdlcy4KK2NvbnN0IFRPS0VOX1NFQ1JFVF9DQUNIRV9UVExf U0VDUzogaTY0ID0gNjA7CiAKICNbZGVyaXZlKFNlcmlhbGl6ZSwgRGVzZXJpYWxpemUpXQogI1tz ZXJkZShyZW5hbWVfYWxsID0gImtlYmFiLWNhc2UiKV0KQEAgLTc0LDIyICs3OCw1NCBAQCBmbiB3 cml0ZV9maWxlKGRhdGE6IEhhc2hNYXA8QXV0aGlkLCBTdHJpbmc+KSAtPiBSZXN1bHQ8KCksIEVy cm9yPiB7CiAvLy8gUmVmcmVzaGVzIHRoZSBpbi1tZW1vcnkgY2FjaGUgaWYgdGhlIG9uLWRpc2sg dG9rZW4uc2hhZG93IGZpbGUgY2hhbmdlZC4KIC8vLyBSZXR1cm5zIHRydWUgaWYgdGhlIGNhY2hl IGlzIHZhbGlkIHRvIHVzZSwgZmFsc2UgaWYgbm90LgogZm4gcmVmcmVzaF9jYWNoZV9pZl9maWxl X2NoYW5nZWQoKSAtPiBib29sIHsKKyAgICBsZXQgbm93ID0gZXBvY2hfaTY0KCk7CisKKyAgICAv LyBDaGVjayBUVEwgKGJlc3QtZWZmb3J0KQorICAgIGxldCBTb21lKGNhY2hlKSA9IFRPS0VOX1NF Q1JFVF9DQUNIRS50cnlfcmVhZCgpIGVsc2UgeworICAgICAgICByZXR1cm4gZmFsc2U7IC8vIGNh bm5vdCB2YWxpZGF0ZSBleHRlcm5hbCBjaGFuZ2VzIC0+IGRvbid0IHRydXN0IGNhY2hlCisgICAg fTsKKworICAgIGxldCB0dGxfb2sgPSBjYWNoZQorICAgICAgICAubGFzdF9jaGVja2VkCisgICAg ICAgIC5pc19zb21lX2FuZCh8bGFzdHwgbm93LnNhdHVyYXRpbmdfc3ViKGxhc3QpIDwgVE9LRU5f U0VDUkVUX0NBQ0hFX1RUTF9TRUNTKTsKKworICAgIGRyb3AoY2FjaGUpOworCisgICAgaWYgdHRs X29rIHsKKyAgICAgICAgcmV0dXJuIHRydWU7CisgICAgfQorCisgICAgLy8gVFRMIGV4cGlyZWQv dW5rbm93biBhdCB0aGlzIHBvaW50IC0+IGRvIGJlc3QtZWZmb3J0IHJlZnJlc2guCiAgICAgbGV0 IFNvbWUobXV0IGNhY2hlKSA9IFRPS0VOX1NFQ1JFVF9DQUNIRS50cnlfd3JpdGUoKSBlbHNlIHsK ICAgICAgICAgcmV0dXJuIGZhbHNlOyAvLyBjYW5ub3QgdmFsaWRhdGUgZXh0ZXJuYWwgY2hhbmdl cyAtPiBkb24ndCB0cnVzdCBjYWNoZQogICAgIH07CiAKKyAgICAvLyBDaGVjayBUVEwgYWZ0ZXIg YWNxdWlyaW5nIHdyaXRlIGxvY2suCisgICAgaWYgbGV0IFNvbWUobGFzdCkgPSBjYWNoZS5sYXN0 X2NoZWNrZWQgeworICAgICAgICBpZiBub3cuc2F0dXJhdGluZ19zdWIobGFzdCkgPCBUT0tFTl9T RUNSRVRfQ0FDSEVfVFRMX1NFQ1MgeworICAgICAgICAgICAgcmV0dXJuIHRydWU7CisgICAgICAg IH0KKyAgICB9CisKKyAgICBsZXQgaGFkX3ByaW9yX3N0YXRlID0gY2FjaGUubGFzdF9jaGVja2Vk LmlzX3NvbWUoKTsKKwogICAgIGxldCBPaygobmV3X210aW1lLCBuZXdfbGVuKSkgPSBzaGFkb3df bXRpbWVfbGVuKCkgZWxzZSB7CiAgICAgICAgIHJldHVybiBmYWxzZTsgLy8gY2Fubm90IHZhbGlk YXRlIGV4dGVybmFsIGNoYW5nZXMgLT4gZG9uJ3QgdHJ1c3QgY2FjaGUKICAgICB9OwogCiAgICAg aWYgY2FjaGUuZmlsZV9tdGltZSA9PSBuZXdfbXRpbWUgJiYgY2FjaGUuZmlsZV9sZW4gPT0gbmV3 X2xlbiB7CisgICAgICAgIGNhY2hlLmxhc3RfY2hlY2tlZCA9IFNvbWUobm93KTsKICAgICAgICAg cmV0dXJuIHRydWU7CiAgICAgfQogCiAgICAgY2FjaGUuc2VjcmV0cy5jbGVhcigpOwogICAgIGNh Y2hlLmZpbGVfbXRpbWUgPSBuZXdfbXRpbWU7CiAgICAgY2FjaGUuZmlsZV9sZW4gPSBuZXdfbGVu OwotICAgIEZJTEVfR0VORVJBVElPTi5mZXRjaF9hZGQoMSwgT3JkZXJpbmc6OkFjcVJlbCk7Cisg ICAgY2FjaGUubGFzdF9jaGVja2VkID0gU29tZShub3cpOworCisgICAgaWYgaGFkX3ByaW9yX3N0 YXRlIHsKKyAgICAgICAgRklMRV9HRU5FUkFUSU9OLmZldGNoX2FkZCgxLCBPcmRlcmluZzo6QWNx UmVsKTsKKyAgICB9CiAKICAgICB0cnVlCiB9CkBAIC0xODgsNiArMjI0LDggQEAgc3RydWN0IEFw aVRva2VuU2VjcmV0Q2FjaGUgewogICAgIGZpbGVfbXRpbWU6IE9wdGlvbjxTeXN0ZW1UaW1lPiwK ICAgICAvLyBzaGFkb3cgZmlsZSBsZW5ndGggdG8gZGV0ZWN0IGNoYW5nZXMKICAgICBmaWxlX2xl bjogT3B0aW9uPHU2ND4sCisgICAgLy8gbGFzdCB0aW1lIHRoZSBmaWxlIG1ldGFkYXRhIHdhcyBj aGVja2VkCisgICAgbGFzdF9jaGVja2VkOiBPcHRpb248aTY0PiwKIH0KIAogLy8vIENhY2hlZCBz ZWNyZXQgYW5kIHRoZSBmaWxlIGdlbmVyYXRpb24gaXQgd2FzIGNhY2hlZCBhdC4KQEAgLTI4MCwx MCArMzE4LDEyIEBAIGZuIGFwcGx5X2FwaV9tdXRhdGlvbigKICAgICAgICAgT2soKG10aW1lLCBs ZW4pKSA9PiB7CiAgICAgICAgICAgICBjYWNoZS5maWxlX210aW1lID0gbXRpbWU7CiAgICAgICAg ICAgICBjYWNoZS5maWxlX2xlbiA9IGxlbjsKKyAgICAgICAgICAgIGNhY2hlLmxhc3RfY2hlY2tl ZCA9IFNvbWUoZXBvY2hfaTY0KCkpOwogICAgICAgICB9CiAgICAgICAgIEVycihfKSA9PiB7CiAg ICAgICAgICAgICBjYWNoZS5maWxlX210aW1lID0gTm9uZTsKICAgICAgICAgICAgIGNhY2hlLmZp bGVfbGVuID0gTm9uZTsKKyAgICAgICAgICAgIGNhY2hlLmxhc3RfY2hlY2tlZCA9IE5vbmU7IC8v IHRvIGZvcmNlIHJlZnJlc2ggbmV4dCB0aW1lCiAgICAgICAgIH0KICAgICB9CiB9Ci0tIAoyLjQ3 LjMKCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcGJz LWRldmVsIG1haWxpbmcgbGlzdApwYnMtZGV2ZWxAbGlzdHMucHJveG1veC5jb20KaHR0cHM6Ly9s aXN0cy5wcm94bW94LmNvbS9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcGJzLWRldmVsCg==