Staying Logged In to Proxmox: Ticket Renewal, Expiry and Where API Tokens Stop

Sun, 31 May 2026 20:24:00 -0700

Back in 2023 I wrote up how go-proxmox logs in and ended it with a shrug. Once a session existed the client never logged in again. A ticket-based client died at the two hour mark. My advice was “use an API token for anything long running”. It took until this month to fix that properly. It took three PRs from two of us to get there. Here’s the whole arc, plus the one place where an API token isn’t an option at all.

Logging In to Proxmox From Go: Tickets, CSRF Tokens and API Tokens

Sun, 27 Aug 2023 19:18:00 -0700

I just spent a week of evenings on the access side of go-proxmox. Realms, groups, users and roles all landed. Before any of that, I reworked how a client gets its credentials in the first place. Proxmox gives you two different ways to authenticate. They behave differently enough that it’s worth writing down how each one works on the wire and what the client does with it.

Authentication on Luther Monson

Staying Logged In to Proxmox: Ticket Renewal, Expiry and Where API Tokens Stop

Logging In to Proxmox From Go: Tickets, CSRF Tokens and API Tokens