37f59f4b0b
AuthContextMiddleware and the fall-through in the controller base _build_policy_check_credentials now utilizes the KeystoneToken model and uses token_provider_api instead of token_api. In support of this change, the token auth plugin, the auth_context builder, token bind check, and token controller have all been updated to utilize the KeystoneToken model. Support for the federation data has been added to the KeystoneToken model so that it can be used in the auth context and associated code. Associated tests that passed a raw token_ref to methods that now expect the KeystoneToken model have been updated. This includes an update to the revocation model to guard against users without domain data (the federated user case). Change-Id: I81da15137a0ab3778d835c8de1ec8ed9e5b301f6 bp: non-persistent-tokens |
||
---|---|---|
bin | ||
doc | ||
etc | ||
examples/pki | ||
httpd | ||
keystone | ||
rally-scenarios | ||
tools | ||
.coveragerc | ||
.gitignore | ||
.gitreview | ||
.mailmap | ||
.testr.conf | ||
babel.cfg | ||
CONTRIBUTING.rst | ||
HACKING.rst | ||
LICENSE | ||
MANIFEST.in | ||
openstack-common.conf | ||
README.rst | ||
requirements-py3.txt | ||
requirements.txt | ||
run_tests.sh | ||
setup.cfg | ||
setup.py | ||
test-requirements-py3.txt | ||
test-requirements.txt | ||
tox.ini |
OpenStack Keystone
Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.
Developer documentation, the source of which is in
doc/source/
, is published at:
The API specification is available at:
The API documentation is available at:
The canonical client library is available at:
Documentation for cloud administrators is available at:
The source of documentation for cloud administrators is available at:
Information about our team meeting is available at:
Bugs and feature requests are tracked on Launchpad at:
Future design work is tracked at:
Contributors are encouraged to join IRC
(#openstack-keystone
on freenode):
For information on contributing to Keystone, see
CONTRIBUTING.rst
.