c21ef89a88
A commonly requested document is what auth plugins are available and what parameters do they accept. Create an extension that can iterate through the stevedore namespace and render all its available options. Change-Id: Id0d0983c9803ce4e0ce201310a1603bc0ff30ca0
76 lines
2.7 KiB
Python
76 lines
2.7 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from keystoneauth1 import identity
|
|
from keystoneauth1 import loading
|
|
|
|
|
|
class Token(loading.BaseGenericLoader):
|
|
"""Given an existing token rescope it to another target.
|
|
|
|
This plugin uses the Identity service's rescope mechanism to get a new
|
|
token based upon an existing token. Because an auth plugin requires a
|
|
service catalog and scope information it is often easier to fetch a new
|
|
token based on an existing one than validate and reuse the one you already
|
|
have.
|
|
|
|
As a generic plugin this plugin is identity version independent and will
|
|
discover available versions before use. This means it expects to be
|
|
providen an unversioned URL to operate against.
|
|
"""
|
|
|
|
@property
|
|
def plugin_class(self):
|
|
return identity.Token
|
|
|
|
def get_options(self):
|
|
options = super(Token, self).get_options()
|
|
|
|
options.extend([
|
|
loading.Opt('token', secret=True,
|
|
help='Token to authenticate with'),
|
|
])
|
|
|
|
return options
|
|
|
|
|
|
class Password(loading.BaseGenericLoader):
|
|
"""Authenticate via a username and password.
|
|
|
|
Authenticate to the identity service using an inbuilt username and
|
|
password. This is the standard and most common form of authentication.
|
|
|
|
As a generic plugin this plugin is identity version independent and will
|
|
discover available versions before use. This means it expects to be
|
|
providen an unversioned URL to operate against.
|
|
"""
|
|
|
|
@property
|
|
def plugin_class(self):
|
|
return identity.Password
|
|
|
|
def get_options(cls):
|
|
options = super(Password, cls).get_options()
|
|
options.extend([
|
|
loading.Opt('user-id', help='User id'),
|
|
loading.Opt('username',
|
|
help='Username',
|
|
deprecated=[loading.Opt('user-name')]),
|
|
loading.Opt('user-domain-id', help="User's domain id"),
|
|
loading.Opt('user-domain-name', help="User's domain name"),
|
|
loading.Opt('password',
|
|
secret=True,
|
|
prompt='Password: ',
|
|
help="User's password"),
|
|
])
|
|
return options
|