keystone/keystone/trust
Colleen Murphy 29280b1f68 Add application credential auth plugin
Add an auth plugin for application credentials and update the common
auth utilities to understand an auth method of 'application_credential'
and validate and scope accordingly.

By default, application credentials should not be allowed to be used for
creating other application credentials or trusts. If a user creates an
application credential with flag `allow_application_credential_creation`
then that application should be allowed to be used for creating and
deleting other application credentials and trusts. Ensure a flag is set
in the token if this property is set to allow this behavior.

bp application-credentials

Change-Id: I15a03e79128a11314d06751b94343f22d533243a
2018-01-27 12:00:19 +01:00
..
backends Add expired_at_int column to trusts 2018-01-04 22:28:44 +01:00
__init__.py Remove exposure of routers at package level 2015-12-03 15:06:56 -03:00
controllers.py Add application credential auth plugin 2018-01-27 12:00:19 +01:00
core.py Use keystone.common.provider_api for trust APIs 2018-01-08 14:35:49 +00:00
routers.py Ensure the trust API supports HEAD requests 2017-06-21 15:04:03 +00:00
schema.py Fix role schema in trust object 2017-11-28 15:21:45 +01:00