From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) by lore.proxmox.com (Postfix) with ESMTPS id 1CC751FF173 for <inbox@lore.proxmox.com>; Mon, 24 Mar 2025 03:44:21 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 64F4F9411; Mon, 24 Mar 2025 03:44:16 +0100 (CET) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1742784215; x=1743389015; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=wZ63PLHACz21Fhjw44uQuONyQkBdHBXhZNDltsrTf7c=; b=Bab0Y86ziINSgm8dtwnMtZMQt2R2iMngkmT6Zxa1O9u+HjGq6gJm9Ac1TrsqJ282ko LTz76Y6b3FpyNgG+m9lwxdZAkjgWS6yZ8gsibUwPAymg3aFSo2MdxMGCFPlCR5L29EVD 5pMiP7th/j7Yq0XpPh8eD62BR/sMmIuaUeWj3O9OAjiLBzv2rbb4TXXKAuP9XkBN01ll +g6nPC1jLSgEatTV+KhuTUCQlvOUf7lhJpnWRzjrTh3x9nGzB9U3Qznrl/HEuxYNIY7U g/biKAx89miF882Rb2S7AyKNhSBciLq3enOnbFy41jrmL14d+CRD6tUJ+3J5joGfo70S cFEw== X-Gm-Message-State: AOJu0Yy/j/EZICeBUJf1m5AW0CsV6HvImb8gRenrHNCuZ6kwA8A7xQBU YtXn1hVtJb/yC+8F8Gfprisste5u93i5Sw760h4YsEOrn9+Zhax8d8SHGA== X-Gm-Gg: ASbGncv8PJvhv+89U7TpWQb0vqjwWWbNBpFSEAc1KF6WV2ZPz81UaK4EYxqCXmlOIp1 dKCWFcV4SltCMsxtqxA8Uq4IK2u/Kbjy9VJ7TrbEH5nCtJmtIF7mKkpkqdiBHefUv1ohc87Keix n0e1W/06MVN/5tWDqNE0UuzeEBmabuUh8L39CZONkkC3006QMFkMzEntN9wOW/ngYH3HLfvlmF1 +slU0sD2V50zqJYhUQFpRdz0sSeVsD9tLh/5/LCon0m7W013BTLV9Hm98oixDkS0w+tI9ODHBm+ 2pipEh/UHJR74fTHM61CoqyjUJI6seVkI9xaK3fMFGS3+vBpeSutZ1VupGZnsKjt/BjSTPyB1so lSiGDT9RjqMl+bg4t6M2xmsEt+O2krQSVSoW+T2esCwv7T7XQcyEYNoFyFA== X-Google-Smtp-Source: AGHT+IHX6lwCwXPbZm7zwX3otu2wIas6DhAL0oxgsLvlqi9TqATJgHfmqzN6DMycMmbx3iaS+i+XXQ== X-Received: by 2002:a05:690c:d8f:b0:6e9:e097:718c with SMTP id 00721157ae682-700babe6430mr158064447b3.6.1742783869878; Sun, 23 Mar 2025 19:37:49 -0700 (PDT) From: Thomas Skinner <thomas@atskinner.net> To: pve-devel@lists.proxmox.com Date: Sun, 23 Mar 2025 21:37:24 -0500 Message-Id: <20250324023728.1294436-1-thomas@atskinner.net> X-Mailer: git-send-email 2.39.5 MIME-Version: 1.0 X-SPAM-LEVEL: Spam detection results: 0 AWL -0.014 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy FREEMAIL_FORGED_FROMDOMAIN 0.001 2nd level domains in From and EnvelopeFrom freemail headers are different FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider HEADER_FROM_DIFFERENT_DOMAINS 0.062 From and EnvelopeFrom 2nd level mail domains are different KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust RCVD_IN_MSPIKE_H3 -0.01 Good reputation (+3) RCVD_IN_MSPIKE_WL -0.01 Mailspike good senders RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: [pve-devel] [PATCH SERIES access-control/docs/manager/proxmox-openid v4] fix #4411: add support for openid groups X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Cc: Thomas Skinner <thomas@atskinner.net> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> Changes since v3: - removed all code/settings/docs for group name replacement characters - conditionally print user added to groups message access-control: Thomas Skinner (1): fix #4411: openid: add logic for openid groups support src/PVE/API2/OpenId.pm | 83 ++++++++++++++++++++++++++++++++++++++++ src/PVE/AccessControl.pm | 2 +- src/PVE/Auth/OpenId.pm | 25 ++++++++++++ src/PVE/Auth/Plugin.pm | 1 + 4 files changed, 110 insertions(+), 1 deletion(-) docs: Thomas Skinner (1): fix #4411: openid: add docs for openid groups support pveum.adoc | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) manager: Thomas Skinner (1): fix #4411: openid: add ui config for openid groups support www/manager6/dc/AuthEditOpenId.js | 34 ++++++++++++++++++++++++++++--- proxmox-openid: Thomas Skinner (1): fix #4411: openid: add library code for generic id token claim support proxmox-openid/src/lib.rs | 55 +++++++++++++++++++++++++++++++++------ -- 2.39.5 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel