Invalidate app cred AFTER deletion

Invalidate the application credential after deletion, not before.
This prevents timing issues where an app_cred could remain active
after deletion.

Change-Id: I14748bf2399e5da4ee360f451a8050f25dd90803
(cherry picked from commit 906a1d3f68)
This commit is contained in:
Morgan Fainberg 2018-10-16 11:20:33 -07:00
parent 31a0818c1a
commit db14ee24a7
1 changed files with 1 additions and 1 deletions

View File

@ -183,9 +183,9 @@ class Manager(manager.Manager):
:raises keystone.exception.ApplicationCredentialNotFound: If the
application credential doesn't exist.
"""
self.driver.delete_application_credential(application_credential_id)
self.get_application_credential.invalidate(self,
application_credential_id)
self.driver.delete_application_credential(application_credential_id)
notifications.Audit.deleted(
self._APP_CRED, application_credential_id, initiator)