OpenStack Identity (Keystone)
Go to file
Lance Bragstad df5d75571e Reduce duplication in federated auth APIs
The GET /v3/OS-FEDERATION/projects and GET /v3/OS-FEDERATION/domains
APIs were introduced to handle tokens from federated users, but now
that GET /v3/auth/projects and GET /v3/auth/domains know how to handle
federated tokens, they're just duplicate APIs.

In the past we deprecated these federated auth APIs, but they still
used separate code paths from GET /v3/auth/projects and GET
/v3/auth/domains. The two code paths are true duplication in that they
don't expect to differ over time and should provide the same user
experience.

Instead of running the risk that comes with two code paths that do the
same thing, we should consolidate them.

Co-Authored-By: Kristi Nikolla <kristi@nikolla.me>

Closes-Bug: 1779205
Change-Id: Ib906c42e1dd2c2408ccd2e256ffd876af02af3fe
2018-07-25 15:15:44 +00:00
api-ref/source Expose endpoint to return enforcement model 2018-07-11 10:03:42 +08:00
config-generator Move policy generator config to config-generator/ 2017-04-21 21:47:32 +00:00
devstack Only upload SP metadata to testshib.org if IDP id is testshib 2018-07-05 15:18:29 +00:00
doc Merge "Switch to python-ldap" 2018-07-18 17:44:25 +00:00
etc Add policy for limit model protection 2018-06-19 20:27:00 +08:00
examples/pki Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
httpd Remove admin interface in sample Apache file 2018-03-24 12:56:02 +01:00
keystone Reduce duplication in federated auth APIs 2018-07-25 15:15:44 +00:00
keystone_tempest_plugin Remove the local tempest plugin 2017-06-06 11:48:37 +00:00
playbooks/legacy Use native Zuul v3 tox job 2018-01-29 06:50:03 +00:00
rally-jobs fix rally docs url 2018-05-21 16:24:51 +08:00
releasenotes Merge "Delete project limits when deleting project" 2018-07-25 02:34:21 +00:00
tools Increase MySQL max_connections for unit tests 2018-01-30 23:49:04 +01:00
.coveragerc Change ignore-errors to ignore_errors 2015-09-21 14:27:58 +00:00
.gitignore Ignore .eggs dir as well 2018-07-04 12:39:20 +00:00
.gitreview Add .gitreview config file for gerrit. 2011-10-24 14:48:03 -04:00
.mailmap update mailmap with gyee's new email 2015-11-03 16:12:01 -08:00
.stestr.conf Migrate to stestr 2017-09-22 11:07:09 -05:00
.zuul.yaml add lower-constraints job 2018-03-23 08:40:54 -04:00
CONTRIBUTING.rst Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
HACKING.rst Merge "Update links in keystone" 2017-10-06 16:10:56 +00:00
LICENSE Added Apache 2.0 License information. 2012-02-15 17:48:33 -08:00
README.rst Add release notes link to README 2018-06-12 15:30:45 +08:00
babel.cfg setting up babel for i18n work 2012-06-21 18:03:09 -07:00
bindep.txt Differentiate between dpkg and rpm for libssl-dev 2017-03-31 11:27:25 -04:00
lower-constraints.txt Merge "Bump lower constraint for pysaml2 to 4.5.0" 2018-07-19 23:23:03 +00:00
requirements.txt Merge "Bump lower constraint for pysaml2 to 4.5.0" 2018-07-19 23:23:03 +00:00
setup.cfg Merge "Switch to python-ldap" 2018-07-18 17:44:25 +00:00
setup.py Updated from global requirements 2017-03-06 01:10:37 +00:00
test-requirements.txt Follow the new PTI for document build 2018-04-09 01:13:58 +09:00
tox.ini fix tox python3 overrides 2018-06-06 16:06:00 -04:00

README.rst

Team and repository tags

image

OpenStack Keystone

Keystone provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. It is most commonly deployed as an HTTP interface to existing identity systems, such as LDAP.

Developer documentation, the source of which is in doc/source/, is published at:

https://docs.openstack.org/keystone/latest

The API reference and documentation are available at:

https://developer.openstack.org/api-ref/identity

The canonical client library is available at:

https://git.openstack.org/cgit/openstack/python-keystoneclient

Documentation for cloud administrators is available at:

https://docs.openstack.org/

The source of documentation for cloud administrators is available at:

https://git.openstack.org/cgit/openstack/openstack-manuals

Information about our team meeting is available at:

https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting

Release notes is available at:

https://docs.openstack.org/releasenotes/keystone

Bugs and feature requests are tracked on Launchpad at:

https://bugs.launchpad.net/keystone

Future design work is tracked at:

https://specs.openstack.org/openstack/keystone-specs

Contributors are encouraged to join IRC (#openstack-keystone on freenode):

https://wiki.openstack.org/wiki/IRC

For information on contributing to Keystone, see CONTRIBUTING.rst.