[pve-devel] [PATCH SERIES access-control/docs/manager/proxmox-openid v3] fix #4411: add support for openid groups

Thomas Skinner thomas at atskinner.net
Tue Feb 11 06:40:25 CET 2025


Continued work on adding support for OIDC groups. 

changes since v2:
- Move RE for group name characters to Plugin.pm
- Undo refactoring of user group deletion
- Refactor logic to use hashes instead of arrays
- Cleanup code style
- Add RE and length limit for group claim
- Clarify docs on suffix and automatic group creation


access-control:

Thomas Skinner (1):
  fix #4411: openid: add logic for openid groups support

 src/PVE/API2/OpenId.pm   | 79 ++++++++++++++++++++++++++++++++++++++++
 src/PVE/AccessControl.pm |  2 +-
 src/PVE/Auth/OpenId.pm   | 33 +++++++++++++++++
 src/PVE/Auth/Plugin.pm   |  1 +
 4 files changed, 114 insertions(+), 1 deletion(-)

 
docs:

Thomas Skinner (1):
  fix #4411: openid: add docs for openid groups support

 pveum.adoc | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)

 
manager:

Thomas Skinner (1):
  fix #4411: openid: add ui config for openid groups support

 www/manager6/dc/AuthEditOpenId.js | 44 ++++++++++++++++++++++++++++---


proxmox-openid:

Thomas Skinner (1):
  fix #4411: openid: add library code for generic id token claim support

 proxmox-openid/src/lib.rs | 55 +++++++++++++++++++++++++++++++++------


-- 
2.39.5




More information about the pve-devel mailing list