1d7c96d6a3
Keystone has shipped with the auth_context middleware in the pipeline now for a number of releases. In newer parts of the code we rely on it for auth information and in others we don't. A prime example of this is the @protected handlers, if the auth_context middleware isn't present it rebuilds this information. This is yet another place where keystone validates a token. Set a flag on the context to indicate that the request was validated by auth_context middleware and raise Unauthenticated if not. This essentially requires deployments to have the middleware enabled and reduces validation to that point. This will help unify the code that is behind a protected endpoint as we can rely on the context. Change-Id: Iceca967e5bf698df13da28d0875c441f2a980e90 |
7 years ago | |
|---|---|---|
| api-ref/source | 7 years ago | |
| config-generator | 7 years ago | |
| doc | 7 years ago | |
| etc | 7 years ago | |
| examples/pki | 8 years ago | |
| httpd | 7 years ago | |
| keystone | 7 years ago | |
| keystone_tempest_plugin | 7 years ago | |
| rally-jobs | 8 years ago | |
| releasenotes | 7 years ago | |
| tools | 7 years ago | |
| .coveragerc | 8 years ago | |
| .gitignore | 7 years ago | |
| .gitreview | 12 years ago | |
| .mailmap | 8 years ago | |
| .testr.conf | 7 years ago | |
| CONTRIBUTING.rst | 8 years ago | |
| HACKING.rst | 8 years ago | |
| LICENSE | 11 years ago | |
| MANIFEST.in | 7 years ago | |
| README.rst | 8 years ago | |
| babel.cfg | 11 years ago | |
| other-requirements.txt | 7 years ago | |
| requirements.txt | 7 years ago | |
| setup.cfg | 7 years ago | |
| setup.py | 8 years ago | |
| test-requirements.txt | 7 years ago | |
| tox.ini | 7 years ago | |
README.rst
OpenStack Keystone
Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.
Developer documentation, the source of which is in doc/source/, is published at:
The API specification and documentation are available at:
The canonical client library is available at:
https://git.openstack.org/cgit/openstack/python-keystoneclient
Documentation for cloud administrators is available at:
The source of documentation for cloud administrators is available at:
Information about our team meeting is available at:
Bugs and feature requests are tracked on Launchpad at:
Future design work is tracked at:
http://specs.openstack.org/openstack/keystone-specs/#identity-program-specifications
Contributors are encouraged to join IRC (#openstack-keystone on freenode):
For information on contributing to Keystone, see CONTRIBUTING.rst.