e361a3ad8e
This is following the same pattern we applied to the token validation path by collapsing the v3 and v2.0 paths together. Here we are going to use issue_v3_token and translate the response to a v2.0 format. This is going to allow us the ability to simplify the token provider interface, remove duplicate logic, and isolate specific v2.0 and v3 token-isms into specific areas. One of the existing test cases changes to assert an Unauthorized exception when a trustee is disabled, instead of a Forbidden exception. The switch is because the behavior is consistent with regular users trying to authenticate with a token when their user is disabled (a 401 is expected). We're making that behavior consistent when a trustee is disabled. A subsequent patch will remove issue_v2_token entirely. Change-Id: I191ce36b2f11f7353e2e3d601af1bda96987613b |
||
|---|---|---|
| api-ref/source | ||
| config-generator | ||
| devstack | ||
| doc | ||
| etc | ||
| examples/pki | ||
| httpd | ||
| keystone | ||
| keystone_tempest_plugin | ||
| rally-jobs | ||
| releasenotes | ||
| tools | ||
| .coveragerc | ||
| .gitignore | ||
| .gitreview | ||
| .mailmap | ||
| .testr.conf | ||
| CONTRIBUTING.rst | ||
| HACKING.rst | ||
| LICENSE | ||
| README.rst | ||
| babel.cfg | ||
| bindep.txt | ||
| requirements.txt | ||
| setup.cfg | ||
| setup.py | ||
| test-requirements.txt | ||
| tox.ini | ||
README.rst
OpenStack Keystone
Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.
Developer documentation, the source of which is in
doc/source/, is published at:
The API specification and documentation are available at:
The canonical client library is available at:
https://git.openstack.org/cgit/openstack/python-keystoneclient
Documentation for cloud administrators is available at:
The source of documentation for cloud administrators is available at:
Information about our team meeting is available at:
Bugs and feature requests are tracked on Launchpad at:
Future design work is tracked at:
http://specs.openstack.org/openstack/keystone-specs/#identity-program-specifications
Contributors are encouraged to join IRC
(#openstack-keystone on freenode):
For information on contributing to Keystone, see
CONTRIBUTING.rst.