From: "Shannon Sterz" <s.sterz@proxmox.com>
To: "Shannon Sterz" <s.sterz@proxmox.com>
Cc: pdm-devel@lists.proxmox.com
Subject: [pdm-devel] Superseded: Re: [PATCH datacenter-manager/proxmox/yew-comp 0/8] add better token support for pdm
Date: Tue, 14 Oct 2025 16:39:10 +0200 [thread overview]
Message-ID: <DDI4EVFZSM6S.2WQSVNVH2VYSL@proxmox.com> (raw)
In-Reply-To: <20251003142108.352525-1-s.sterz@proxmox.com>
On Fri Oct 3, 2025 at 4:21 PM CEST, Shannon Sterz wrote:
> this series aims to add a ui to the pre-existing token support in pdm.
> it also aims to get it more in-line with what other proxmox products
> provide in terms of functionality.
>
> the first two patches prepaer proxmox-access-control by refactoring it a
> little bit. the next commit adds api endpoints for handling tokens.
> these api endpoints are intentionally not providing any access control
> permissions, so that users of this crate can set them themselves.
>
> the next two commits improve the token panel in proxmox-yew-comp by
> using the Clipboard API when copying values. the layout and
> functionality of the dialog displaying the token secret is also
> improved.
>
> the final three patches integrate the token panel in pdm's ui. they also
> refactor the api endpoints related token handling to use the new
> endpoints from proxmxo-access-control and make sure the user delete
> endpoint cleans up acls and tokens too.
>
> Changelog
> ---------
>
> changes since rfc:
> - the commits implementing the basic token panel have already been
> applied by Thomas Lamprecht, thanks!
> - moved adding `use` and `mod` statements for the token module to the
> right commit in the series (thanks @ Dominik Csapak)
> - generate token secrets in the `token_shadow` module instead of in the
> token endpoints themselves (thanks @ Fabian Grünbichler)
> - use a schema for the `regenerate` parameter of the update token
> endpoint (thanks @ Fabian Grünbichler)
> - allow deleting comments via a `delete` property (thanks @ Fabian
> Grünbichler)
> - make the token delete endpoint clean up token acls (thanks @ Fabian
> Grünbichler)
> - improve copy to clipboard functionality to use the new Clipboard API
> - improve the layout of the token secret dialog (thanks @ Thomas
> Lamprecht)
>
>
> proxmox:
>
> Shannon Sterz (3):
> access-control: refactor api module to be more hirachical
> access-control: move `ApiTokenSecret` to types module
> access-control: add api endpoints for handling tokens
>
> proxmox-access-control/Cargo.toml | 1 +
> .../src/{api.rs => api/acl.rs} | 0
> proxmox-access-control/src/api/mod.rs | 8 +
> proxmox-access-control/src/api/tokens.rs | 310 ++++++++++++++++++
> proxmox-access-control/src/token_shadow.rs | 17 +-
> proxmox-access-control/src/types.rs | 43 ++-
> 6 files changed, 369 insertions(+), 10 deletions(-)
> rename proxmox-access-control/src/{api.rs => api/acl.rs} (100%)
> create mode 100644 proxmox-access-control/src/api/mod.rs
> create mode 100644 proxmox-access-control/src/api/tokens.rs
>
>
> proxmox-yew-comp:
>
> Shannon Sterz (2):
> utils/tfa add recover/token panel: add copy_text_to_clipboard function
> token panel: improve token secret dialog layout and hide password
>
> Cargo.toml | 2 +
> src/tfa/tfa_add_recovery.rs | 17 ++----
> src/token_panel.rs | 117 ++++++++++++++++++------------------
> src/utils.rs | 22 +++++++
> 4 files changed, 89 insertions(+), 69 deletions(-)
>
>
> proxmox-datacenter-manager:
>
> Shannon Sterz (3):
> ui: add a token panel and a token acl edit menu in the permissions
> panel
> server: access: use token endpoints from proxmox-access-control
> server: clean up acl tree entries and api tokens when deleting users
>
> server/src/api/access/users.rs | 388 ++++++---------------------------
> ui/src/configuration/mod.rs | 33 ++-
> 2 files changed, 95 insertions(+), 326 deletions(-)
>
>
> Summary over all repositories:
> 12 files changed, 553 insertions(+), 405 deletions(-)
>
> --
> Generated by git-murpp 0.8.1
Superseded-by: https://lore.proxmox.com/all/20251014143709.413690-1-s.sterz@proxmox.com/T/#t
_______________________________________________
pdm-devel mailing list
pdm-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pdm-devel
prev parent reply other threads:[~2025-10-14 14:39 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-10-03 14:21 [pdm-devel] " Shannon Sterz
2025-10-03 14:21 ` [pdm-devel] [PATCH proxmox 1/3] access-control: refactor api module to be more hirachical Shannon Sterz
2025-10-09 17:29 ` [pdm-devel] applied: " Thomas Lamprecht
2025-10-03 14:21 ` [pdm-devel] [PATCH proxmox 2/3] access-control: move `ApiTokenSecret` to types module Shannon Sterz
2025-10-09 17:29 ` [pdm-devel] applied: " Thomas Lamprecht
2025-10-03 14:21 ` [pdm-devel] [PATCH proxmox 3/3] access-control: add api endpoints for handling tokens Shannon Sterz
2025-10-09 17:29 ` [pdm-devel] applied: " Thomas Lamprecht
2025-10-03 14:21 ` [pdm-devel] [PATCH yew-comp 1/2] utils/tfa add recover/token panel: add copy_text_to_clipboard function Shannon Sterz
2025-10-10 12:09 ` Dominik Csapak
2025-10-03 14:21 ` [pdm-devel] [PATCH yew-comp 2/2] token panel: improve token secret dialog layout and hide password Shannon Sterz
2025-10-10 12:16 ` Dominik Csapak
2025-10-10 12:36 ` Shannon Sterz
2025-10-03 14:21 ` [pdm-devel] [PATCH datacenter-manager 1/3] ui: add a token panel and a token acl edit menu in the permissions panel Shannon Sterz
2025-10-03 14:21 ` [pdm-devel] [PATCH datacenter-manager 2/3] server: access: use token endpoints from proxmox-access-control Shannon Sterz
2025-10-03 14:21 ` [pdm-devel] [PATCH datacenter-manager 3/3] server: clean up acl tree entries and api tokens when deleting users Shannon Sterz
2025-10-14 14:39 ` Shannon Sterz [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=DDI4EVFZSM6S.2WQSVNVH2VYSL@proxmox.com \
--to=s.sterz@proxmox.com \
--cc=pdm-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox