Re: [PATCH proxmox 3/4] api-types: add a scheme generic URL regex

["Shan Shaji" <s.shaji@proxmox.com>]

Hi,

I have tested this again when checking the app open ID [0] series with the custom
scheme and I was wrong about optionaly allowing to not have the
host part. Sorry!

So, when the redirect_uri is specified without the host part (com.proxmox.app.openid://)
it will generate an authorization URL but keycloak will fail to parse it. The login
prompt won't be shown. So, the behavior for PDM I believe is correct. Perhaps, we might need
to update the validation for PVE and PBS as well? I am also not sure why it was relaxed
there in first place. 

Anyways, the changes inside this series  looks fine to me. I am getting the
authorization url correctly. So, please consider this: 

```
curl -o - --data '{"realm":"proxmox","redirect-url":"com.proxmox.app.openid://openid-callback"}' \\
--header 'Content-Type: application/json;charset=UTF-8' \\
-k https://10.12.0.11:8443/api2/extjs/access/openid/auth-url | jq
```

- [0]  https://lore.proxmox.com/pve-devel/20260810144713.75806-1-haque@azharul.com/T/#u

Reviewed-by: Shan Shaji <s.shaji@proxmox.com>
Tested-by: Shan Shaji <s.shaji@proxmox.com>

On Tue Aug 18, 2026 at 5:08 PM CEST, Shan Shaji wrote:
> Hi,
>
> I have tested the changes and went through the code. AFAICT,
> everything looks good except for one thing.
>
> Without the changes, when sending a curl request, I got the error
> as mentioned in the ticket. After applying the fix, the
> "redirect-url" regex validation works when using the same test URLs from
> the test and I am getting a valid "data" response. However, when
> using the redirect URIs without the host part (e.g: pveauth://, proxman://),
> the validation still fails.
>
> AFAIK, in Android and iOS, since the host part is not mandatory for
> custom schemes, IMHO it would be better to support the case where
> the host part is optional as well. That is, as we discussed off
> list: for http(s) URLs, the host part is mandatory, and for custom
> URLs, the host part doesn't have to be mandatory.
>
> On Thu Aug 13, 2026 at 5:05 PM CEST, Thomas Ellmenreich wrote:
>> The current URL regex, HTTP_URL_REGEX, is specific to the HTTP and HTTPS
>> schemes. This patch creates a new regex that is scheme-generic and thus
>> allows any other valid scheme.
>>
>> It also adds tests that cover some basic URL edge cases.
>>
>> Signed-off-by: Thomas Ellmenreich <t.ellmenreich@proxmox.com>
>> ---
>>  pbs-api-types/src/lib.rs        |  1 +
>>  proxmox-schema/src/api_types.rs | 40 ++++++++++++++++++++++++++++++++-
>>  2 files changed, 40 insertions(+), 1 deletion(-)
>>
>> diff --git a/pbs-api-types/src/lib.rs b/pbs-api-types/src/lib.rs
>> index 21ef733d..924f356b 100644
>> --- a/pbs-api-types/src/lib.rs
>> +++ b/pbs-api-types/src/lib.rs
>> @@ -44,6 +44,7 @@ pub use proxmox_schema::api_types::HTTP_URL_SCHEMA;
>>  pub use proxmox_schema::api_types::MULTI_LINE_COMMENT_SCHEMA;
>>  pub use proxmox_schema::api_types::NODE_SCHEMA;
>>  pub use proxmox_schema::api_types::SINGLE_LINE_COMMENT_FORMAT;
>> +pub use proxmox_schema::api_types::URL_SCHEMA;
>>  pub use proxmox_schema::api_types::{
>>      BLOCKDEVICE_DISK_AND_PARTITION_NAME_SCHEMA, BLOCKDEVICE_NAME_SCHEMA,
>>  };
>
>>>snip<<