From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pve-devel-bounces@lists.proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9])
	by lore.proxmox.com (Postfix) with ESMTPS id 412D41FF16F
	for <inbox@lore.proxmox.com>; Thu, 27 Mar 2025 02:55:53 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
	by firstgate.proxmox.com (Proxmox) with ESMTP id 9A9251FB4;
	Thu, 27 Mar 2025 02:55:45 +0100 (CET)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1743040535; x=1743645335;
 h=content-transfer-encoding:mime-version:message-id:date:subject:cc
 :to:from:x-gm-message-state:from:to:cc:subject:date:message-id
 :reply-to;
 bh=t9kFIIdpFydGfdIyE2Zkw+QXaFRFwG7qr82jrUDtOCo=;
 b=DFzl8ralMjUjBzFKLqBl1rg3ynZPhptPvtgCzl3BhzzyLkg/qITbsmxJktArOzpm6d
 9NKBYNy8axgOz2OUmSugHnrMXHXtDBFT8MALgeF/SzHLM0Vp5fWU9KJpOpBb0LaULHPe
 Vg6qx/Nn3h9JMsqcYEAG5HHdkDlCe4O9l7PmnkR/1+z1zbbOxpY3+klWAqN1s+Imsev1
 QLWXOiq95f4EmyMHKDfmzXCILeOPsIFIaOO9jLFX4p4frqop5Ul8n+Ef7bGwa0va7As3
 vuVtB/brxZPCf+UIulLQcofYrBUgDIAdGZhrcdZDq8OQ7UTIPzMBIDaxGM8IoQWsbcP3
 MSxw==
X-Gm-Message-State: AOJu0YyLYnXuEFqs8Btzu/PhLU+nokyl7/EuNEII7bpOM5Ubc32ZhFhS
 ovQ0ZsGp/NtHl7uLoi4w5qAChoPDjNEZt55SC9QO0HduJPUY2YdITcTTCkDA
X-Gm-Gg: ASbGncvEWG89skMD1PH4UPLj0F5OXm63+PuyXJW3Gs8rEak2ArChlhepOUaimL2tiQ8
 jFY6cyDUfzFLxqKJZbWQY/ZK4b8AVjmq17PNvq9ldM3fIOs9dt59N5WqvuJRllwdUFfp3fJ9FDq
 7juOQQUwkWH8EhE2ug1XJphyNKj8bXniZu87C6/B11Uh8ZIqaoVwWZzSlyiuisqsfoF/OHhF6v8
 E7+6WiGL8xYfzPmEDrGaAYKFDjt8IEYy6ulHfHCfVVj6GV0W0lBI7TfoSq/d1jJiHtZej8m92cR
 gzZjk2uLJRNlmyASDzTSmGB/UHfZ85Cn3znbHaWk3fLDmA9kZ8p5PUiBAAoBzDClfVDkqNb8uVh
 2HOkLg9jHM3XWwKbUQpxjpMMb4G1/RYVzZecx+GVRRytXYCrz2wtr+LUQeQ==
X-Google-Smtp-Source: AGHT+IEe1nZRVxxYJjphnoI4S25xGB1Smq2/AOBLzHo0s5GJLj6Ti1aVfRkTwdWW58nRulCS5578pw==
X-Received: by 2002:a05:690c:4441:b0:6fe:c021:624 with SMTP id
 00721157ae682-70224f21126mr21267877b3.8.1743040211820; 
 Wed, 26 Mar 2025 18:50:11 -0700 (PDT)
From: Thomas Skinner <thomas@atskinner.net>
To: pve-devel@lists.proxmox.com
Date: Wed, 26 Mar 2025 20:49:58 -0500
Message-Id: <20250327015002.1982876-1-thomas@atskinner.net>
X-Mailer: git-send-email 2.39.5
MIME-Version: 1.0
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.009 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 DMARC_MISSING             0.1 Missing DMARC policy
 FREEMAIL_FORGED_FROMDOMAIN 0.001 2nd level domains in From and EnvelopeFrom
 freemail headers are different
 FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
 HEADER_FROM_DIFFERENT_DOMAINS 0.007 From and EnvelopeFrom 2nd level mail
 domains are different
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 RCVD_IN_DNSWL_NONE     -0.0001 Sender listed at https://www.dnswl.org/,
 no trust RCVD_IN_MSPIKE_H2       0.001 Average reputation (+2)
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: [pve-devel] [PATCH SERIES
 access-control/docs/manager/proxmox-openid v5] fix #4411: add support for
 openid groups
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>
Cc: Thomas Skinner <thomas@atskinner.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: pve-devel-bounces@lists.proxmox.com
Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com>

Changes since v4:
- remove invalid section from docs

access-control:

Thomas Skinner (1):
  fix #4411: openid: add logic for openid groups support

 src/PVE/API2/OpenId.pm   | 83 ++++++++++++++++++++++++++++++++++++++++
 src/PVE/AccessControl.pm |  2 +-
 src/PVE/Auth/OpenId.pm   | 25 ++++++++++++
 src/PVE/Auth/Plugin.pm   |  1 +
 4 files changed, 110 insertions(+), 1 deletion(-)

 
docs:

Thomas Skinner (1):
  fix #4411: openid: add docs for openid groups support

 pveum.adoc | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

 
manager:

Thomas Skinner (1):
  fix #4411: openid: add ui config for openid groups support

 www/manager6/dc/AuthEditOpenId.js | 34 ++++++++++++++++++++++++++++---


proxmox-openid:

Thomas Skinner (1):
  fix #4411: openid: add library code for generic id token claim support

 proxmox-openid/src/lib.rs | 55 +++++++++++++++++++++++++++++++++------
-- 
2.39.5


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel