12 Commits

Author SHA1 Message Date
Derek Higgins
7cdae1bc02 Fixing pep8 errors in tests/*py
Fixes bug 1022575

Making change to tests/*py to pass pep8 tests.
pep8 tests started failing following
39b20acc933cb0fdf73075ddb9a9d82665b84b23 update pep8 to 1.3.3
04df79b64e5f2296df03579700535774e158f623 include tests dir in pep8 tests

Change-Id: I2d7dec0a87f1ae9b5f828d7f321b65bf8c06a421
2012-07-09 16:11:30 +01:00
Jenkins
987bc69326 Merge "Use X_USER_NAME and X_ROLES headers." 2012-06-06 15:56:38 +00:00
Jenkins
b6dbb103e1 Merge "Add ACL check using <tenant_id>:<user> format." 2012-05-29 21:38:26 +00:00
Jenkins
ab735fe20f Merge "Allow other middleware overriding authentication." 2012-05-29 20:58:23 +00:00
Chmouel Boudjnah
bb2fbb7030 Fixes some pep8 warning/errors.
- Using flake8 so a bit more than that.

Change-Id: I63fa21f7d3d02f96c0c56804fdd56da37c952d7d
2012-05-24 16:21:09 +02:00
Lin Hua Cheng
30654a65ea Add ACL check using <tenant_id>:<user> format.
Fixes bug 999998.

Swift auth middleware uses a new format for expressing
a container ACL for a user: <tenant_name>:<user>. This
fix add supports for checking ACL using the old format
of <tenant_id>:<user>.

Change-Id: I44985b191afb174605c35041741056ae1e78fa77
2012-05-22 22:16:59 -07:00
Chmouel Boudjnah
daf395b5e8 Use X_USER_NAME and X_ROLES headers.
- Don't use deprecated headers X_USER and X_ROLE but the newest one
  X_USER_NAME and X_ROLES.
- Fixes bug 999447.

Change-Id: I12752c7668863cbb47ee4b6e484cc494133443e8
2012-05-22 15:03:15 +00:00
Chmouel Boudjnah
bcb12ef9d5 Allow other middleware overriding authentication.
- Implements blueprint swift-middleware-add-overrides-feature.
- Let other middleware do authentication for certain request allow
  tempurl or formpost to temporary allow access for certain object and do
  the validation in there.

Change-Id: I4f5bcb5832f96ced2c6c10d565737ae894771690
2012-05-21 14:03:13 +02:00
Maru Newby
12354cd82b Stub out swift log configuration during testing
* s3_token and swift_auth depend on swift.common.utils.get_logger,
   which configures a syslog handler in an OS X-incompatible way.
   This change ensures that get_logger is stubbed out for the
   swift middleware tests to allow the Keystone test suite to execute
   successfully under OS X.
 * Addresses bug 974583

Change-Id: Ibdb665d1ea65c13ef792767ad66251857629a702
2012-04-06 08:06:16 -07:00
Maru Newby
6ec1782dcc Add support to swift_auth for tokenless authz
* Updates keystone.middleware.swift_auth to allow token-less
   (unauthenticated) access for container sync (bug 954030) and
   permitted referrers (bug 924578).

Change-Id: Ieccf458c44dfe55f546dc15c79704800dad59ac0
2012-03-30 17:26:54 -07:00
Maru Newby
f3af691863 Improve swift_auth test coverage + Minor fixes
* Isolates authorize() tests from wsgi tests
 * Adds coverage for authorize()
 * Adds support for a blank reseller_prefix
 * Adds swift_auth test dependencies to tools/test-requires
 * Cleans up authorize()'s use of tenant_id/tenant_name
   (addresses bug 963546)

Change-Id: I603b89ab4fe8559b0f5d72528afd659ee0f0bce1
2012-03-23 16:24:53 -07:00
Chmouel Boudjnah
53b3d44988 Add test for swift middleware.
- skip the tests if we don't have swift installed.

Change-Id: I3647538f3e7a32cbfce97b181c532371cef963da
2012-03-20 23:01:00 +00:00