[pbs-devel] [PATH proxmox-backup v1 00/12] OpenID connect realms

Dietmar Maurer dietmar at proxmox.com
Tue Jun 22 10:56:08 CEST 2021


This implements OpenID connect realms using the new
"proxmox-openid-rs" crate.

Changes since preview version (for Fabian):
- fix commit message
- reserve namen 'pam' and 'pbs'
- fix 'make deb'

Dietmar Maurer (12):
  depend on openid-connect-rs
  config: new domains.cfg to configure openid realm
  check_acl_path: add /access/domains
  add API to manage openid realms
  cli: add CLI to manage openid realms.
  api: add openid redirect API
  implement new helper is_active_user_id()
  api: add openid-login endpoint
  ui: implement OpenId login
  cleanup user/token is_active() check
  add openid autocreate account feature
  implement openid user-attr configuration

 Cargo.toml                               |   2 +
 src/api2/access.rs                       | 127 ++++++++++-
 src/api2/access/domain.rs                |  62 ++++-
 src/api2/config/access/mod.rs            |   8 +-
 src/api2/config/access/openid.rs         | 274 +++++++++++++++++++++++
 src/bin/proxmox-backup-manager.rs        |   1 +
 src/bin/proxmox_backup_manager/mod.rs    |   2 +
 src/bin/proxmox_backup_manager/openid.rs |  99 ++++++++
 src/config.rs                            |   1 +
 src/config/acl.rs                        |   2 +-
 src/config/cached_user_info.rs           |  35 ++-
 src/config/domains.rs                    | 175 +++++++++++++++
 src/config/user.rs                       |  32 +++
 www/Application.js                       |   8 +-
 www/LoginView.js                         | 100 ++++++++-
 www/Utils.js                             |   8 +
 16 files changed, 908 insertions(+), 28 deletions(-)
 create mode 100644 src/api2/config/access/openid.rs
 create mode 100644 src/bin/proxmox_backup_manager/openid.rs
 create mode 100644 src/config/domains.rs

-- 
2.30.2





More information about the pbs-devel mailing list