emersonfelipesp/netbox-proxbox v0.0.11.post1

v0.0.11.post1 — Settings permission fix & sync improvements

on GitHub

What's Changed

Bug Fixes

• fix(api): ProxboxPluginSettingsViewSet now overrides get_permissions() so GET/HEAD/OPTIONS require only IsAuthenticated instead of ObjectPermissionRequiredMixin. Any valid NetBox API token (v1 or v2) can read plugin settings without needing view_proxboxpluginsettings explicitly granted in NetBox admin. (proxbox-api #45)
• fix(backend_sync): Use effective_token_value for v1 token extraction in _netbox_endpoint_backend_payload; add fallback to FK token key for v2 when CharFields are empty; log warnings on missing credentials instead of silently sending an empty token.
• fix(import): Accept version and repoid headers in ProxmoxEndpoint CSV import.
• fix(sync): Retry on HTTP 429 (rate limit) responses during stage sync.
• fix(api): Add explicit url field to NestedProxmoxStorageSerializer.
• fix(api): Disable auto-generated UniqueTogetherValidator on NestedProxmoxStorageSerializer to prevent false validation errors.

CI

• Gate PyPI publish on validate-testpypi (install + test matrix) instead of e2e-docker-local, so a pre-existing Docker infrastructure issue no longer blocks package release.
• Switch Proxmox mock container to proxmox-sdk:dev-nginx for HTTPS support in E2E stack.
• Various E2E mock data fixes: LXC mp0 disk, VM config types, cluster/resources id fields, snapshot subtype comparison.

Root Cause (proxbox-api #45)

Two independent bugs caused HTTP 403 on GET /api/plugins/proxbox/settings/:

1. This repo — ProxboxPluginSettingsViewSet required explicit view_proxboxpluginsettings permission. Standard API tokens don't carry this by default. Fixed by overriding get_permissions() for safe HTTP methods.
2. proxbox-api — v2 auth header was built incorrectly (nbt <key>:<secret> instead of Bearer nbt_<key>.<secret>). Fixed in proxbox-api v0.0.7.post1.

Both fixes together restore automatic token exchange between the plugin and the backend so proxbox-api can fetch ProxboxPluginSettings without manual permission setup.