[pve-devel] [PATCH access-control v2 1/5] fix #4234: add library functions for openid optional userinfo request

2024-12-15 Thread Thomas Skinner
Signed-off-by: Thomas Skinner --- src/PVE/API2/OpenId.pm | 6 +- src/PVE/Auth/OpenId.pm | 7 +++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/src/PVE/API2/OpenId.pm b/src/PVE/API2/OpenId.pm index 77410e6..ea1de16 100644 --- a/src/PVE/API2/OpenId.pm +++ b/src/PVE/API2/Ope

[pve-devel] [PATCH manager v2 3/5] fix #4234: add GUI option for openid optional userinfo request

2024-12-15 Thread Thomas Skinner
Signed-off-by: Thomas Skinner --- www/manager6/dc/AuthEditOpenId.js | 9 + 1 file changed, 9 insertions(+) diff --git a/www/manager6/dc/AuthEditOpenId.js b/www/manager6/dc/AuthEditOpenId.js index 544c0de5..904e508c 100644 --- a/www/manager6/dc/AuthEditOpenId.js +++ b/www/manager6/dc/Aut

[pve-devel] [PATCH proxmox v2 5/5] fix #4234: openid: add library functions for optional userinfo endpoint

2024-12-15 Thread Thomas Skinner
Signed-off-by: Thomas Skinner --- proxmox-openid/src/lib.rs | 30 +- 1 file changed, 29 insertions(+), 1 deletion(-) diff --git a/proxmox-openid/src/lib.rs b/proxmox-openid/src/lib.rs index fe65fded..87be1c8a 100644 --- a/proxmox-openid/src/lib.rs +++ b/proxmox-openid

[pve-devel] [PATCH access-control/docs/manager/perl-rs/proxmox-openid v2 0/5] Make OIDC userinfo endpoint optional

2024-12-15 Thread Thomas Skinner
Continues work on adding an option to disable querying the userinfo endpoint for an OIDC provider. Changes since v1: - Adjust to add option in the UI to enable the functionality - Add documentation for the option - Adjust API back to previous behavior access-control: Thomas Skinner (1): fix

[pve-devel] [PATCH perl-rs v2 4/5] fix #4234: openid: adjust openid verification function for userinfo option

2024-12-15 Thread Thomas Skinner
Signed-off-by: Thomas Skinner --- pve-rs/src/openid/mod.rs | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/pve-rs/src/openid/mod.rs b/pve-rs/src/openid/mod.rs index 1fa7572..cd573ee 100644 --- a/pve-rs/src/openid/mod.rs +++ b/pve-rs/src/openid/mod.rs @@ -50,13 +50,18

[pve-devel] [PATCH docs v2 2/5] fix #4234: add docs for openid optional userinfo request

2024-12-15 Thread Thomas Skinner
Signed-off-by: Thomas Skinner --- pveum.adoc | 8 1 file changed, 8 insertions(+) diff --git a/pveum.adoc b/pveum.adoc index 81565ab..1d18d38 100644 --- a/pveum.adoc +++ b/pveum.adoc @@ -479,6 +479,14 @@ Another option is to use `email`, which also yields human readable usernames. Aga