openstack
/
keystone
Code Issues Proposed changes
keystone/keystone/tests/unit
History
prashkre 9a4391c49a Removing group role assignments results in overly broad revocation events 
When a role on a group scoped to project/domain is revoked, it persists
revocation event in revoke_event table which is invalidating all tokens
created with same role in project/domain. Since token validations are happening
by populating role assignments at validation time, the need for persistence of
revocation events is no longer needed.

Change-Id: I112d5d4684f739d320606cea651e0a108f18d245
Closes-Bug: #1662514
(cherry picked from commit 2cb842cd64)
 		2017-03-03 03:38:17 +00:00
..
assignment Removing group role assignments results in overly broad revocation events 2017-03-03 03:38:17 +00:00
auth Cleanup TODO about auth.controller code moved to core 2017-01-31 16:52:36 +00:00
backend Remove stable driver interfaces 2016-09-28 17:18:37 +00:00
catalog Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
common Merge "Use https for docs.openstack.org references" 2017-02-01 16:36:44 +00:00
config_files Remove LDAP write support 2017-01-21 21:32:07 -05:00
contrib Adds tests showing how mapping locals are handled 2017-01-26 20:42:12 +00:00
credential fix credentials backend tests 2016-11-04 09:08:31 -05:00
endpoint_policy Fixes remaining nits in endpoint_policy tests 2016-11-15 20:03:47 +00:00
external Adds interface tests for timeutils 2015-09-23 12:43:37 +00:00
federation Validate mapping exists when creating/updating a protocol 2016-10-20 19:12:04 +00:00
identity Fix MFA rule checks for LDAP auth 2017-02-24 12:02:09 -05:00
ksfixtures Merge "Process and validate auth methods against MFA rules" 2017-02-01 02:34:24 +00:00
policy Create unit tests for the policy drivers 2016-08-09 11:59:20 -03:00
resource Remove CONF.domain_id_immutable 2017-01-03 22:51:15 +00:00
saml2 Add openstack_user_domain to assertion 2015-05-04 14:33:48 -03:00
schema Rename v2 token schema used for validation 2016-03-10 21:41:22 +00:00
tests Adds a skip method to identify useless skips 2016-06-29 19:48:12 +00:00
token Merge "Cleanup TODO, AuthContext and AuthInfo to auth.core" 2017-02-01 02:42:53 +00:00
trust Use more specific asserts in tests 2016-08-04 12:48:08 +02:00
__init__.py enable ldap tests for py3 2016-05-18 12:07:23 -04:00
core.py Code-Defined Resource-specific Options 2017-01-25 16:15:44 -08:00
default_catalog.templates Move existing tests to unit 2015-02-13 15:54:29 -06:00
default_fixtures.py Fix MFA rule checks for LDAP auth 2017-02-24 12:02:09 -05:00
fakeldap.py Remove LDAP write support 2017-01-21 21:32:07 -05:00
federation_fixtures.py Move existing tests to unit 2015-02-13 15:54:29 -06:00
filtering.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
identity_mapping.py Use the new enginefacade from oslo.db 2016-02-24 08:20:12 -08:00
mapping_fixtures.py Merge "Catch potential SyntaxError in federation mapping" 2017-01-26 09:21:08 +00:00
rest.py Remove driver version specifiers from tests 2016-10-06 21:22:48 +00:00
test_associate_project_endpoint_extension.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_auth.py refactor the token controller 2016-11-11 17:43:56 +00:00
test_auth_plugin.py Cleanup TODO, AuthContext and AuthInfo to auth.core 2017-01-31 16:52:41 +00:00
test_backend_endpoint_policy.py Use new_policy_ref consistently 2015-12-09 10:18:36 -08:00
test_backend_endpoint_policy_sql.py Fixes the SQL model tests 2015-03-08 05:34:48 +00:00
test_backend_federation_sql.py Require domain_id when registering Identity Providers 2017-01-06 16:05:12 +00:00
test_backend_id_mapping_sql.py Do not call `to_dict` outside of a session context 2017-01-25 06:12:20 +00:00
test_backend_kvs.py Merge "Ensure all v2.0 tokens are validated the same way" 2016-10-12 03:16:36 +00:00
test_backend_ldap.py Remove code supporting moving resources between domains 2017-01-24 13:08:48 -08:00
test_backend_ldap_pool.py Code-Defined Resource-specific Options 2017-01-25 16:15:44 -08:00
test_backend_rules.py Split policy backend tests 2016-03-04 15:32:42 -03:00
test_backend_sql.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_backend_templated.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_catalog.py Handling of 'region' parameter as None 2017-01-17 20:03:03 +00:00
test_cert_setup.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_cli.py Merge "Add doctor checks for ldap symptoms" 2016-12-16 04:47:35 +00:00
test_config.py Using assertIsNone() instead of assertIs(None) 2016-09-26 15:33:18 +07:00
test_contrib_s3_core.py Fix string conversion in s3 handler for python 2 2015-11-18 13:25:27 +03:00
test_contrib_simple_cert.py Fixes to get cert tests running in Py3 2016-03-02 02:11:02 +00:00
test_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_driver_hints.py Use assertTrue/False instead of assertEqual(T/F) 2015-11-02 09:10:38 +00:00
test_entry_points.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_exception.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_hacking_checks.py Use public interfaces of pep8 for hacking 2017-01-09 16:30:01 +00:00
test_kvs.py Fix D400 PEP257 2016-04-21 15:25:34 +00:00
test_ldap_livetest.py Remove releated role_tree_dn test 2017-01-21 23:16:38 +08:00
test_ldap_pool_livetest.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_ldap_tls_livetest.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
test_middleware.py Skip middleware request processing for admin token 2016-08-02 19:47:32 -07:00
test_no_admin_token_auth.py Deprecate keystone.common.kvs 2016-05-12 23:30:15 -07:00
test_policy.py Fix cloud_admin rule and ensure only project tokens can be cloud admin 2016-12-23 09:31:08 +00:00
test_revoke.py Modify the spelling mistakes 2017-02-02 14:23:21 +00:00
test_shadow_users.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_sql_banned_operations.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_sql_upgrade.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_token_bind.py Change tests to use common name for keystone.tests.unit 2015-09-04 18:21:42 +00:00
test_token_provider.py Switch fernet to be the default token provider. 2016-11-02 00:33:24 +00:00
test_url_middleware.py Fix D401 PEP8 violation. 2016-04-14 20:08:52 +00:00
test_v2.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_v2_controller.py Use request.params instead of context['query_string'] 2016-06-29 04:46:57 +10:00
test_v2_validation.py Removes unnecessary utf-8 encoding 2016-12-26 12:59:21 +07:00
test_v3.py Cleanup TODO, AuthContext and AuthInfo to auth.core 2017-01-31 16:52:41 +00:00
test_v3_assignment.py Removing group role assignments results in overly broad revocation events 2017-03-03 03:38:17 +00:00
test_v3_auth.py Removing group role assignments results in overly broad revocation events 2017-03-03 03:38:17 +00:00
test_v3_catalog.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_v3_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_v3_domain_config.py Implement password requirements API 2016-12-15 19:51:41 +00:00
test_v3_endpoint_policy.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_federation.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_filters.py Add password expiration queries for PCI-DSS 2017-01-24 09:01:12 -06:00
test_v3_identity.py Create user option `ignore_lockout_failure_attempts` 2017-01-29 13:19:44 -08:00
test_v3_oauth1.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_os_revoke.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_policy.py Implement HEAD method for all v3 GET actions 2016-03-22 10:27:53 -07:00
test_v3_protection.py listing revoke events should be admin only 2017-01-09 21:12:47 +00:00
test_v3_resource.py Remove CONF.domain_id_immutable 2017-01-03 22:51:15 +00:00
test_v3_trust.py Invalidate trust when the related project is deleted 2016-10-14 16:55:06 +00:00
test_validation.py Add validation for mfa rule validator (storage) 2017-01-31 08:49:35 -08:00
test_versions.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_wsgi.py Merge "Use http_client constants instead of hardcoding" 2016-07-09 00:53:19 +00:00
utils.py Add new functionality to @wip 2016-05-22 16:06:50 +00:00