keystone/doc/source/extensions/revoke-configuration.rst

Enabling the OS-REVOKE Extension

To enable the OS-REVOKE extension:

1. Add the driver fields and values in the [revoke] section in keystone.conf. For the KVS Driver:

   [revoke]
   driver = keystone.contrib.revoke.backends.kvs.Revoke

For the SQL driver:

driver = keystone.contrib.revoke.backends.sql.Revoke

2. Add the required filter to the pipeline in keystone-paste.ini:

   [filter:revoke_extension]
   paste.filter_factory = keystone.contrib.revoke.routers:RevokeExtension.factory
   
   [pipeline:api_v3]
   pipeline = access_log sizelimit url_normalize token_auth admin_token_auth xml_body json_body revoke_extension service_v3

3. Create the extension tables if using the provided SQL backend:

   ./bin/keystone-manage db_sync --extension revoke