From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 7F15B1FF15C for ; Fri, 17 Oct 2025 15:37:07 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 320BA3F21; Fri, 17 Oct 2025 15:37:29 +0200 (CEST) Mime-Version: 1.0 Date: Fri, 17 Oct 2025 15:36:55 +0200 Message-Id: To: =?utf-8?q?Fabian_Gr=C3=BCnbichler?= X-Mailer: aerc 0.20.0 References: <20251014133044.337162-1-s.sterz@proxmox.com> <20251014133044.337162-8-s.sterz@proxmox.com> <1760684951.paenarjg51.astroid@yuna.none> In-Reply-To: <1760684951.paenarjg51.astroid@yuna.none> From: "Shannon Sterz" X-Bm-Milter-Handled: 55990f41-d878-4baa-be0a-ee34c49e34d2 X-Bm-Transport-Timestamp: 1760708212262 X-SPAM-LEVEL: Spam detection results: 0 AWL 0.056 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pdm-devel] [PATCH datacenter-manager 2/3] server: api: add support for adding openid realms and openid logins X-BeenThere: pdm-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox Datacenter Manager development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Proxmox Datacenter Manager development discussion Cc: Proxmox Datacenter Manager development discussion Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pdm-devel-bounces@lists.proxmox.com Sender: "pdm-devel" T24gRnJpIE9jdCAxNywgMjAyNSBhdCA5OjU3IEFNIENFU1QsIEZhYmlhbiBHcsO8bmJpY2hsZXIg d3JvdGU6Cj4gT24gT2N0b2JlciAxNCwgMjAyNSAzOjMwIHBtLCBTaGFubm9uIFN0ZXJ6IHdyb3Rl OgoKLS0+OCBzbmlwIDg8LS0KCj4+ICsgICAgICAgICAgICBsZXQgKHJlYWxtLCBwcml2YXRlX2F1 dGhfc3RhdGUpID0KPj4gKyAgICAgICAgICAgICAgICBPcGVuSWRBdXRoZW50aWNhdG9yOjp2ZXJp ZnlfcHVibGljX2F1dGhfc3RhdGUoUERNX1JVTl9ESVJfTSEoKSwgJnN0YXRlKT87Cj4+ICsKPj4g KyAgICAgICAgICAgIGxldCAoZG9tYWlucywgX2RpZ2VzdCkgPSBwZG1fY29uZmlnOjpkb21haW5z Ojpjb25maWcoKT87Cj4+ICsgICAgICAgICAgICBsZXQgY29uZmlnOiBPcGVuSWRSZWFsbUNvbmZp ZyA9IGRvbWFpbnMubG9va3VwKCJvcGVuaWQiLCAmcmVhbG0pPzsKPj4gKyAgICAgICAgICAgIGxl dCBvcGVuX2lkID0gb3BlbmlkX2F1dGhlbnRpY2F0b3IoJmNvbmZpZywgJnJlZGlyZWN0X3VybCk/ Owo+PiArICAgICAgICAgICAgbGV0IGluZm8gPSBvcGVuX2lkLnZlcmlmeV9hdXRob3JpemF0aW9u X2NvZGVfc2ltcGxlKCZjb2RlLCAmcHJpdmF0ZV9hdXRoX3N0YXRlKT87Cj4+ICsgICAgICAgICAg ICBsZXQgbmFtZV9hdHRyID0gY29uZmlnLnVzZXJuYW1lX2NsYWltLmFzX2RlcmVmKCkudW53cmFw X29yKCJzdWIiKTsKPj4gKwo+PiArICAgICAgICAgICAgLy8gVHJ5IHRvIGJlIGNvbXBhdGlibGUg d2l0aCBwcmV2aW91cyB2ZXJzaW9ucwo+PiArICAgICAgICAgICAgbGV0IHRyeV9hdHRyID0gbWF0 Y2ggbmFtZV9hdHRyIHsKPj4gKyAgICAgICAgICAgICAgICAic3ViamVjdCIgPT4gU29tZSgic3Vi IiksCj4+ICsgICAgICAgICAgICAgICAgInVzZXJuYW1lIiA9PiBTb21lKCJwcmVmZXJyZWRfdXNl cm5hbWUiKSwKPj4gKyAgICAgICAgICAgICAgICBfID0+IE5vbmUsCj4+ICsgICAgICAgICAgICB9 Owo+PiArCj4+ICsgICAgICAgICAgICBsZXQgdW5pcXVlX25hbWUgPSBpZiBsZXQgU29tZShuYW1l KSA9IGluZm9bbmFtZV9hdHRyXQo+PiArICAgICAgICAgICAgICAgIC5hc19zdHIoKQo+PiArICAg ICAgICAgICAgICAgIC5vcl9lbHNlKHx8IHRyeV9hdHRyLmFuZF90aGVuKHxhdHR8IGluZm9bYXR0 XS5hc19zdHIoKSkpCj4+ICsgICAgICAgICAgICB7Cj4+ICsgICAgICAgICAgICAgICAgbmFtZS50 b19vd25lZCgpCj4+ICsgICAgICAgICAgICB9IGVsc2Ugewo+PiArICAgICAgICAgICAgICAgIGJh aWwhKCJtaXNzaW5nIGNsYWltICd7bmFtZV9hdHRyfSciKTsKPj4gKyAgICAgICAgICAgIH07Cj4+ ICsKPj4gKyAgICAgICAgICAgIGxldCB1c2VyX2lkID0gVXNlcmlkOjp0cnlfZnJvbShmb3JtYXQh KCJ7dW5pcXVlX25hbWV9QHtyZWFsbX0iKSk/Owo+PiArICAgICAgICAgICAgdGVzdGVkX3VzZXJu YW1lID0gU29tZSh1bmlxdWVfbmFtZSk7Cj4+ICsKPj4gKyAgICAgICAgICAgIGlmICF1c2VyX2lu Zm8uaXNfYWN0aXZlX3VzZXJfaWQoJnVzZXJfaWQpIHsKPj4gKyAgICAgICAgICAgICAgICBpZiBj b25maWcuYXV0b2NyZWF0ZS51bndyYXBfb3IoZmFsc2UpIHsKPj4gKyAgICAgICAgICAgICAgICAg ICAgbGV0IF9sb2NrID0gcHJveG1veF9hY2Nlc3NfY29udHJvbDo6dXNlcjo6bG9ja19jb25maWco KT87Cj4+ICsgICAgICAgICAgICAgICAgICAgIGxldCAobXV0IHVzZXJfY29uZmlnLCBfZGlnZXN0 KSA9IHByb3htb3hfYWNjZXNzX2NvbnRyb2w6OnVzZXI6OmNvbmZpZygpPzsKPj4gKwo+PiArICAg ICAgICAgICAgICAgICAgICBpZiBsZXQgT2sob2xkX3VzZXIpID0gdXNlcl9jb25maWcubG9va3Vw Ojo8VXNlcj4oInVzZXIiLCB1c2VyX2lkLmFzX3N0cigpKSB7Cj4+ICsgICAgICAgICAgICAgICAg ICAgICAgICBpZiBsZXQgU29tZShmYWxzZSkgPSBvbGRfdXNlci5lbmFibGUgewo+PiArICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGJhaWwhKCJ1c2VyICd7dXNlcl9pZH0nIGlzIGRpc2FibGVk LiIpOwo+PiArICAgICAgICAgICAgICAgICAgICAgICAgfSBlbHNlIHsKPj4gKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICBiYWlsISgiYXV0b2NyZWF0ZSB1c2VyIGZhaWxlZCAtICd7dXNlcl9p ZH0nIGFscmVhZHkgZXhpc3RzLiIpOwo+PiArICAgICAgICAgICAgICAgICAgICAgICAgfQo+PiAr ICAgICAgICAgICAgICAgICAgICB9Cj4+ICsKPj4gKyAgICAgICAgICAgICAgICAgICAgbGV0IGZp cnN0bmFtZSA9IGluZm9bImdpdmVuX25hbWUiXQo+PiArICAgICAgICAgICAgICAgICAgICAgICAg LmFzX3N0cigpCj4+ICsgICAgICAgICAgICAgICAgICAgICAgICAubWFwKHxufCBuLnRvX3N0cmlu ZygpKQo+PiArICAgICAgICAgICAgICAgICAgICAgICAgLmZpbHRlcih8bnwgRklSU1RfTkFNRV9T Q0hFTUEucGFyc2Vfc2ltcGxlX3ZhbHVlKG4pLmlzX29rKCkpOwo+PiArCj4+ICsgICAgICAgICAg ICAgICAgICAgIGxldCBsYXN0bmFtZSA9IGluZm9bImZhbWlseV9uYW1lIl0KPj4gKyAgICAgICAg ICAgICAgICAgICAgICAgIC5hc19zdHIoKQo+PiArICAgICAgICAgICAgICAgICAgICAgICAgLm1h cCh8bnwgbi50b19zdHJpbmcoKSkKPj4gKyAgICAgICAgICAgICAgICAgICAgICAgIC5maWx0ZXIo fG58IExBU1RfTkFNRV9TQ0hFTUEucGFyc2Vfc2ltcGxlX3ZhbHVlKG4pLmlzX29rKCkpOwo+PiAr Cj4+ICsgICAgICAgICAgICAgICAgICAgIGxldCBlbWFpbCA9IGluZm9bImVtYWlsIl0KPj4gKyAg ICAgICAgICAgICAgICAgICAgICAgIC5hc19zdHIoKQo+PiArICAgICAgICAgICAgICAgICAgICAg ICAgLm1hcCh8bnwgbi50b19zdHJpbmcoKSkKPj4gKyAgICAgICAgICAgICAgICAgICAgICAgIC5m aWx0ZXIofG58IEVNQUlMX1NDSEVNQS5wYXJzZV9zaW1wbGVfdmFsdWUobikuaXNfb2soKSk7Cj4+ ICsKPj4gKyAgICAgICAgICAgICAgICAgICAgbGV0IHVzZXIgPSBVc2VyIHsKPj4gKyAgICAgICAg ICAgICAgICAgICAgICAgIHVzZXJpZDogdXNlcl9pZC5jbG9uZSgpLAo+PiArICAgICAgICAgICAg ICAgICAgICAgICAgY29tbWVudDogTm9uZSwKPj4gKyAgICAgICAgICAgICAgICAgICAgICAgIGVu YWJsZTogTm9uZSwKPj4gKyAgICAgICAgICAgICAgICAgICAgICAgIGV4cGlyZTogTm9uZSwKPj4g KyAgICAgICAgICAgICAgICAgICAgICAgIGZpcnN0bmFtZSwKPj4gKyAgICAgICAgICAgICAgICAg ICAgICAgIGxhc3RuYW1lLAo+PiArICAgICAgICAgICAgICAgICAgICAgICAgZW1haWwsCj4+ICsg ICAgICAgICAgICAgICAgICAgIH07Cj4+ICsKPj4gKyAgICAgICAgICAgICAgICAgICAgdXNlcl9j b25maWcuc2V0X2RhdGEodXNlci51c2VyaWQuYXNfc3RyKCksICJ1c2VyIiwgJnVzZXIpPzsKPj4g KyAgICAgICAgICAgICAgICAgICAgcHJveG1veF9hY2Nlc3NfY29udHJvbDo6dXNlcjo6c2F2ZV9j b25maWcoJnVzZXJfY29uZmlnKT87Cj4+ICsgICAgICAgICAgICAgICAgfSBlbHNlIHsKPj4gKyAg ICAgICAgICAgICAgICAgICAgYmFpbCEoInVzZXIgYWNjb3VudCAne3VzZXJfaWR9JyBtaXNzaW5n LCBkaXNhYmxlZCBvciBleHBpcmVkLiIpOwo+PiArICAgICAgICAgICAgICAgIH0KPj4gKyAgICAg ICAgICAgIH0KPj4gKwo+PiArICAgICAgICAgICAgbGV0IGFwaV90aWNrZXQgPSBBcGlUaWNrZXQ6 OkZ1bGwodXNlcl9pZC5jbG9uZSgpKTsKPj4gKyAgICAgICAgICAgIGxldCB0aWNrZXQgPSBUaWNr ZXQ6Om5ldyhhdXRoX2NvbnRleHQuYXV0aF9wcmVmaXgoKSwgJmFwaV90aWNrZXQpPzsKPj4gKyAg ICAgICAgICAgIGxldCB0b2tlbiA9IGFzc2VtYmxlX2NzcmZfcHJldmVudGlvbl90b2tlbihhdXRo X2NvbnRleHQuY3NyZl9zZWNyZXQoKSwgJnVzZXJfaWQpOwo+PiArICAgICAgICAgICAgZW52Lmxv Z19hdXRoKHVzZXJfaWQuYXNfc3RyKCkpOwo+PiArCj4+ICsgICAgICAgICAgICBPaygodXNlcl9p ZCwgdGlja2V0LCB0b2tlbikpCj4+ICsgICAgICAgIH0pKCk7Cj4+ICsKPj4gKyAgICAgICAgbGV0 ICh1c2VyX2lkLCBtdXQgdGlja2V0LCB0b2tlbikgPSByZXN1bHQubWFwX2Vycih8ZXJyfCB7Cj4+ ICsgICAgICAgICAgICBsZXQgbXNnID0gZXJyLnRvX3N0cmluZygpOwo+PiArICAgICAgICAgICAg ZW52LmxvZ19mYWlsZWRfYXV0aCh0ZXN0ZWRfdXNlcm5hbWUsICZtc2cpOwo+Cj4gdGhpcyBpcyBj b3BpZWQgb3ZlciBmcm9tIFBCUywgYnV0IGlzbid0IHRoaXMgYWxzbyBraW5kYSB3cm9uZz8gbm90 IGV2ZXJ5Cj4gZXJyb3IgYWJvdmUgaXMgYSBmYWlsZWQgYXV0aC4uIGF0IGxlYXN0IGlmIHdlIGNv bXBhcmUgZXJyb3IgaGFuZGxpbmcKPiBoZXJlIHdpdGggdGhlIG9uZSBpbiB0aGUgcmVndWxhciB0 aWNrZXQgZmxvdywgdGhpcyBpcyBpbmNvbnNpc3RlbnQuLgo+Cj4gbWlnaHQgcmF0aGVyIGJlIGZv bGxvdy11cCBtYXRlcmlhbCBhZnRlciBjbG9zZXIgdGhvdWdodCB0aG91Z2gsIGFuZAo+IGVuc3Vy aW5nIFBCUyBhbmQgUERNIGJlaGF2ZSB0aGUgc2FtZSBhZnRlcndhcmRzLi4KCgp5ZXMgdGhpcyBy ZXF1aXJlcyBzb21lIHRob3VnaCBhcyB0byB3aGV0aGVyIHdpbGwgYWNjaWRlbnRhbGx5IGxlYWsg c29tZQppbmZvcm1hdGlvbiBoZXJlIG90aGVyd2lzZS4gZm9yIG5vdyBpJ2Qga2VlcCBpdCBpbiBs aW5lIHdpdGggcGJzLgoKaW5jb3Jwb3JhdGVkIHRoZSByZXN0IG9mIHRoZSBmZWVkYmFjayBoZXJl IGludG8gYSB2MiEKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpwZG0tZGV2ZWwgbWFpbGluZyBsaXN0CnBkbS1kZXZlbEBsaXN0cy5wcm94bW94LmNvbQpo dHRwczovL2xpc3RzLnByb3htb3guY29tL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wZG0tZGV2 ZWwK