proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-08-14 09:27:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix #4234: add library functions for openid optional userinfo request

Browse Source 
Signed-off-by: Thomas Skinner <thomas@atskinner.net>
Tested-by: Mira Limbeck <m.limbeck@proxmox.com>
This commit is contained in:
Thomas Skinner 2025-03-23 22:37:35 -05:00 committed by Fabian Grünbichler
parent e80f840ccc
commit 97795a0043
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/PVE/API2/OpenId.pm
View File

@ -171,7 +171,11 @@ __PACKAGE__->register_method ({
my ($config, $openid) = $lookup_openid_auth->($realm, $redirect_url);
my $info = $openid->verify_authorization_code($param->{code}, $private_auth_state);
my $info = $openid->verify_authorization_code(
$param->{code},
$private_auth_state,
$config->{'query-userinfo'} // 1,
);
my $subject = $info->{'sub'};
my $unique_name;

7
src/PVE/Auth/OpenId.pm
View File

@ -85,6 +85,12 @@ sub properties {
pattern => '^[^\x00-\x1F\x7F <>#"]*$', # Prohibit characters not allowed in URI RFC 2396.
optional => 1,
},
"query-userinfo" => {
description => "Enables querying the userinfo endpoint for claims values.",
type => 'boolean',
default => 1,
optional => 1,
},
};
}
@ -103,6 +109,7 @@ sub options {
"acr-values" => { optional => 1 },
default => { optional => 1 },
comment => { optional => 1 },
"query-userinfo" => { optional => 1 },
};
}