[pbs-devel] applied: [PATCH proxmox-backup v2] fix #5190: api-types: openid acr format regex
Thomas Lamprecht
t.lamprecht at proxmox.com
Thu Feb 8 18:22:01 CET 2024
Am 06/02/2024 um 11:09 schrieb Gabriel Goller:
> Allow more complex strings for the acr-value when using openid. The
> openid documentation only specifies the acr-value *should* be an URI [0].
> Implemented a regex that loosely disallows some of the reserved URI
> characters specified in the RFC [1].
>
> Currently values like:
> - "urn:mace:incommon:iap:silver"
> - "urn:comsolve.nl:idp:contract:rba:location"
> do NOT work, although they are correct URI's and common acr tokens.
>
> [0]: https://openid.net/specs/openid-connect-core-1_0.html
> [1]: https://www.rfc-editor.org/rfc/rfc2396.txt
>
> Signed-off-by: Gabriel Goller <g.goller at proxmox.com>
> ---
>
> v1 -> v2 changes:
> * added more context, renamed variable
>
> pbs-api-types/src/lib.rs | 5 +++++
> pbs-api-types/src/openid.rs | 7 ++++---
> 2 files changed, 9 insertions(+), 3 deletions(-)
>
>
applied, reflowed the commit message to fit in < 70 characters per
line, as per our dev docs [0], and added a reference to the PVE
change (can only help), thanks!
[0]: https://pve.proxmox.com/wiki/Developer_Documentation#Commits_and_Commit_Messages
More information about the pbs-devel
mailing list