proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-10-04 08:21:57 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

drop unused old u2f code

Browse Source 
Its functionality has been replaced by the rust TFA implementation and
the last calls to these were removed with commit cfd8636b5e ("drop
support for old login API") in 2023.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2025-06-10 15:45:55 +02:00
parent e6f96ca2fe
commit ce3c99e3f7
1 changed files with 0 additions and 43 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
src/PVE/API2/AccessControl.pm
View File

@ -24,12 +24,6 @@ use PVE::API2::TFA;
use PVE::Auth::Plugin;
use PVE::OTP;
my $u2f_available = 0;
eval {
require PVE::U2F;
$u2f_available = 1;
};
use base qw(PVE::RESTHandler);
__PACKAGE__->register_method({
@ -400,43 +394,6 @@ __PACKAGE__->register_method({
},
});
sub get_u2f_config() {
die "u2f support not available\n" if !$u2f_available;
my $dc = cfs_read_file('datacenter.cfg');
my $u2f = $dc->{u2f};
die "u2f not configured in datacenter.cfg\n" if !$u2f;
return $u2f;
}
sub get_u2f_instance {
my ($rpcenv, $publicKey, $keyHandle) = @_;
# We store the public key base64 encoded (as the api provides it in binary)
$publicKey = decode_base64($publicKey) if defined($publicKey);
my $u2fconfig = get_u2f_config();
my $u2f = PVE::U2F->new();
# via the 'Host' header (in case a node has multiple hosts available).
my $origin = $u2fconfig->{origin};
if (!defined($origin)) {
$origin = $rpcenv->get_request_host(1);
if ($origin) {
$origin = "https://$origin";
} else {
die "failed to figure out u2f origin\n";
}
}
my $appid = $u2fconfig->{appid} // $origin;
$u2f->set_appid($appid);
$u2f->set_origin($origin);
$u2f->set_publicKey($publicKey) if defined($publicKey);
$u2f->set_keyHandle($keyHandle) if defined($keyHandle);
return $u2f;
}
sub verify_user_tfa_config {
my ($type, $tfa_cfg, $value) = @_;