openstack
/
cookbook-openstack-orchestration
Code Issues Proposed changes

Change authtoken to keystoneclient.middleware.auth_token:filter_factory 

Add authurl before authtoken in the heat-api pipeline
And change filter:authtoken to:
[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

Further information please refer to related bug.

Related-Bug: #1259364

Change-Id: If71772a84f783e7ebe662d7d6338e86d8dcb9812
This commit is contained in:
yanhcdl 2014-02-13 18:02:34 +08:00
parent 80c8412f32
commit 69cda59569
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
templates/default/api-paste.ini.erb
View File

@ -2,7 +2,7 @@
# heat-api pipeline
[pipeline:heat-api]
pipeline = faultwrap versionnegotiation authtoken context apiv1app
pipeline = faultwrap versionnegotiation authurl authtoken context apiv1app
# heat-api pipeline for standalone heat
# ie. uses alternative auth backend that authenticates users against keystone
@ -75,9 +75,13 @@ paste.filter_factory = heat.common.context:ContextMiddleware_filter_factory
[filter:ec2authtoken]
paste.filter_factory = heat.api.aws.ec2token:EC2Token_filter_factory
# Middleware to set auth_url header appropriately
[filter:authurl]
paste.filter_factory = heat.common.auth_url:filter_factory
# Auth middleware that validates token against keystone
[filter:authtoken]
paste.filter_factory = heat.common.auth_token:filter_factory
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
# Auth middleware that validates username/password against keystone
[filter:authpassword]