[pmg-devel] [PATCH pmg-api 0/2] use hmac_sha_256 for csrf token

[Thomas Lamprecht]

Am 8/16/19 um 4:02 PM schrieb Stoiko Ivanov:
> After applying this (also to a future stable-5 branch we could consider also
> releasing libpve-common-perl 5.0-54 for PMG (it's currently on 5.0-52, and I
> assume it's due to this missing link).
> 

FYI, we cannot apply this exact to stable-5, cannot use HMAC already
there, this is the reason I made two different compat patches in access
control, on for new -> old[0] (like yours here) and one for old -> new[1]
(AFAICT, missing here).

[0]: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff;h=e149b1c6c9954c07672d63f23f696d5b1e6c11d4
[1]: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff;h=00c8c8fe0d3eefcca015f39c3e4967c70543e36e (from stable-5 branch)