keystone/keystone/revoke
Lance Bragstad c7658abfd6 Simplify token persistence callbacks
The INVALIDATE_USER_TOKEN_PERSISTENCE and
INVALIDATE_USER_PROJECT_TOKEN_PERSISTENCE callbacks were meant to
clean up invalid tokens from the token storage layer. Now that the
sql token driver has been removed, we don't need them any more. This
commit removes those notifications and refactors the places where
notifications are still needed, making them more specific and not
eluding to token persistence.

This commit also removes a significant amount of logic from the
assignment API that used to notify the token API when assignments
were deleted. This made sense when tokens were written to disk
because there was an opportunity to invalidate them when users were
removed from projects. This is no longer needed since we do
validation online and we don't persist tokens anymore.

Change-Id: I100b7416e8ba61eb4ea2c2eb4962e952a53ea388
2018-02-16 21:40:07 +00:00
..
backends Improve check_token validation performance 2016-10-13 15:39:54 +00:00
__init__.py Remove exposure of routers at package level 2015-12-03 15:06:56 -03:00
controllers.py Use keystone.common.provider_api for revoke APIs 2017-12-27 17:31:30 +00:00
core.py Simplify token persistence callbacks 2018-02-16 21:40:07 +00:00
model.py Use requst local in-process cache per request 2016-02-24 13:34:46 -08:00
routers.py Move revoke extension into core 2015-11-18 15:14:07 +00:00