keystone/keystone/token/providers
Jose Castro Leon 578be15629 Allows to use application credentials through group membership
When using role assignment through groups, the user cannot use
the application credentials created. This allows to look up
the membership by checking inherited and group assignments.

Conflicts:
    This change conflicts with newer branches because most of the
    logic in keystone/token/providers/common.py was refactored into
    keystone/models/token_model.py during the Rocky release. This
    refactor causes the stable/queens version to diverge from
    stable/rocky, stable/stein, and stable/train patches, although it
    is functionally equivalent to the approach used in later releases.

Change-Id: If1bf5bd785a494923303265797311d42018ba7af
Closes-Bug: #1773967
(cherry picked from commit 14b25bc5d1)
(cherry picked from commit 933ea511d1)
(cherry picked from commit cf83fc1056)
2019-11-13 15:28:46 +00:00
..
fernet Populate application credential data in token 2018-02-20 08:47:02 +01:00
__init__.py Implements Pluggable V3 Token Provider 2013-07-12 13:34:22 -07:00
base.py Remove metadata from token provider 2016-11-20 12:44:45 +00:00
common.py Allows to use application credentials through group membership 2019-11-13 15:28:46 +00:00
uuid.py Deprecate (and slate for removal) UUID tokens 2017-02-11 06:01:27 +00:00