openstack
/
keystone
Code Issues Proposed changes

Merge "Add annotation about token authenticate"

This commit is contained in:
Jenkins 2017-06-23 21:31:02 +00:00 committed by Gerrit Code Review
parent 8213d0979b bf5404907e
commit 939bf150f2
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
keystone/auth/plugins/token.py
View File

@ -102,6 +102,10 @@ def token_authenticate(request, token_ref):
# issued prior to audit id existing, the chain is not tracked.
token_audit_id = None
# To prevent users from never having to re-authenticate, the original
# token expiration time is maintained in the new token. Not doing this
# would make it possible for a user to continuously bump token
# expiration through token rescoping without proving their identity.
response_data.setdefault('expires_at', token_ref.expires)
response_data['audit_id'] = token_audit_id
response_data.setdefault('user_id', token_ref.user_id)