keystone/releasenotes/notes/bug-1656076-c4422270f73b43b.yaml
Steve Martinelli 5e2cc88ce7 clean up release notes for ocata
Change-Id: I9f4d47518f1a1ab184d6cefb2b251aaad38e113a
2017-01-27 14:36:54 +00:00

16 lines
696 B
YAML

---
fixes:
- >
[`bug 1656076 <https://bugs.launchpad.net/keystone/+bug/1656076>`_]
The various plugins under ``keystone.controllers.Auth.authenticate`` now
require ``AuthContext`` objects to be returned.
security:
- >
[`bug 1650676 <https://bugs.launchpad.net/keystone/+bug/1656076>`_]
Authentication plugins now required ``AuthContext`` objects to be used. This
has added security features to ensure information such as the ``user_id``
does not change between authentication methods being processed
by the server. The ``keystone.controllers.Auth.authenticate``
method now requires the argument ``auth_context`` to be an actual
``AuthContext`` object.