keystone/keystone/token
Lance Bragstad c7658abfd6 Simplify token persistence callbacks
The INVALIDATE_USER_TOKEN_PERSISTENCE and
INVALIDATE_USER_PROJECT_TOKEN_PERSISTENCE callbacks were meant to
clean up invalid tokens from the token storage layer. Now that the
sql token driver has been removed, we don't need them any more. This
commit removes those notifications and refactors the places where
notifications are still needed, making them more specific and not
eluding to token persistence.

This commit also removes a significant amount of logic from the
assignment API that used to notify the token API when assignments
were deleted. This made sense when tokens were written to disk
because there was an opportunity to invalidate them when users were
removed from projects. This is no longer needed since we do
validation online and we don't persist tokens anymore.

Change-Id: I100b7416e8ba61eb4ea2c2eb4962e952a53ea388
2018-02-16 21:40:07 +00:00
..
providers Remove needs_persistence property from token providers 2018-02-15 20:38:54 +00:00
__init__.py Remove the sql token driver and uuid token provider 2018-02-12 17:32:47 +00:00
_simple_cert.py Remove all v2.0 APIs except the ec2tokens API 2018-02-06 23:12:55 +01:00
provider.py Simplify token persistence callbacks 2018-02-16 21:40:07 +00:00
token_formatters.py Implement system-scope in the token provider API 2018-01-23 13:50:20 +00:00