proxmox-backup/pbs-api-types
Gabriel Goller e0222ce83c fix #5190: api: OIDC: accept generic URIs for the ACR value
Allow more complex strings for the acr-value when using openid. The
openid documentation only specifies the acr-value *should* be an URI
[0].  Implemented a regex that loosely disallows some of the reserved
URI characters specified in the RFC [1].

Currently values like:
- "urn:mace:incommon:iap:silver"
- "urn:comsolve.nl:idp:contract:rba:location"
do NOT work, although they are correct URI's and common acr tokens.

For Proxmox VE we had to actually make this more strict to align with
each other, as there we accepted any string.

[0]: https://openid.net/specs/openid-connect-core-1_0.html
[1]: https://www.rfc-editor.org/rfc/rfc2396.txt

Signed-off-by: Gabriel Goller <g.goller@proxmox.com>
2024-02-08 18:14:30 +01:00
..
src fix #5190: api: OIDC: accept generic URIs for the ACR value 2024-02-08 18:14:30 +01:00
tests move api-types tests to api-types and drop vec![] macro 2024-01-10 10:13:45 +01:00
Cargo.toml api-types: client: datastore: tools: use proxmox-human-bytes crate 2023-06-26 13:56:45 +02:00