[PATCH installer 10/16] auto: enforce https for post hook when generating an API token

[Christoph Heiss <c.heiss@proxmox.com>]

As we include the token secret in the post-hook information, and (in
this particular case) the token is scoped on root@pam, enforce a minimum
level of security.

Signed-off-by: Christoph Heiss <c.heiss@proxmox.com>
---
Depends on the `proxmox-installer-types` changes and an accompanying
dependency bump.

 proxmox-auto-installer/src/utils.rs | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/proxmox-auto-installer/src/utils.rs b/proxmox-auto-installer/src/utils.rs
index 710af21..7762738 100644
--- a/proxmox-auto-installer/src/utils.rs
+++ b/proxmox-auto-installer/src/utils.rs
@@ -11,7 +11,7 @@ use proxmox_installer_types::{
     answer::{
         AutoInstallerConfig, DiskSelection, Filesystem, FilesystemOptions, FilesystemType,
         FilterMatch, FirstBootHookSourceMode, FqdnConfig, FqdnFromDhcpConfig, FqdnSourceMode,
-        NetworkConfig,
+        NetworkConfig, PostNotificationHookInfo,
     },
 };
 
@@ -496,6 +496,16 @@ pub fn verify_network_settings(
     Ok(())
 }
 
+pub fn verify_post_hook_settings(hook: &PostNotificationHookInfo) -> Result<()> {
+    info!("Verifying post-installation hook settings");
+
+    if hook.api_token_name.is_some() && !hook.url.starts_with("https://") {
+        bail!("`post-installation-webhook.api-token-name` can only be used with HTTPS");
+    }
+
+    Ok(())
+}
+
 pub fn parse_answer(
     answer: &AutoInstallerConfig,
     udev_info: &UdevInfo,
@@ -518,6 +528,10 @@ pub fn parse_answer(
     verify_first_boot_settings(answer)?;
     verify_network_settings(&answer.network, Some(runtime_info))?;
 
+    if let Some(info) = &answer.post_installation_webhook {
+        verify_post_hook_settings(info)?;
+    }
+
     let root_password = match (
         &answer.global.root_password,
         &answer.global.root_password_hashed,
-- 
2.54.0