[pbs-devel] applied: [PATCH proxmox v3] login: use `ticket` if both it and `ticket_info` are provided

Thomas Lamprecht t.lamprecht at proxmox.com
Fri Oct 3 21:43:38 CEST 2025


On Thu, 02 Oct 2025 09:57:06 +0200, Shannon Sterz wrote:
> previously the precense of `ticket_info` was assumed to indicate the
> HTTPOnly authentication flow. the `ticket` field was ignore in that
> case, because the client has no way of validating a ticket anyway.
> 
> this commit changes the behaviour to assume that the server is not
> trying to "trick us" and that the presence of a `ticket` field
> indicates that this value should be used for authentication. if the
> `ticket_info` field is also present, it will be ignored.
> 
> [...]

Applied, thanks!

[1/1] login: use `ticket` if both it and `ticket_info` are provided
      commit: b0d98294278d6de930610e3e33789183882dde0e




More information about the pbs-devel mailing list