proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-08-12 09:35:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

openid: make groups-claim RE more restrictive

Browse Source 
always possible to lift, but hard to lock down after the fact..

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
This commit is contained in:
Fabian Grünbichler 2025-04-04 15:11:07 +02:00
parent d9582bb9b8
commit e80f840ccc
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/PVE/Auth/OpenId.pm
View File

@ -9,8 +9,8 @@ use PVE::Cluster qw(cfs_register_file cfs_read_file cfs_write_file cfs_lock_file
use base qw(PVE::Auth::Plugin);
# include all printable ascii characters
my $openid_claim_regex = qr/[ -~]+/;
# FIXME: restrict username-claim as well?
my $openid_claim_regex = qr/A-Za-z0-9\.\-_/;
sub type {
return 'openid';