Colleen Murphy 5f093bf5ee Add validation of app cred access rules ... This commit adds a validation step in the auth_token middleware to check for the presence of an access_rules attribute in an application credential token and to validate the request against the permissions granted for that token. During token validation it sends a header to keystone to indicate that it is capable of validating these access rules, and not providing this header for a token like this would result in the token failing validation. This disregards access rules for a service request made by a service on behalf of a user, such as nova making a request to glance, because such a request is not under the control of the user and is not expected to be explicitly allowed in the access rules. bp whitelist-extension-for-app-creds Depends-On: https://review.opendev.org/670377 Change-Id: I185e0541d5df538d74edadf9976b3034a2470c88		2019-07-15 16:05:59 -07:00
..
audit	Make sure audit middleware use own context	2018-12-24 02:02:17 +00:00
auth_token	Add validation of app cred access rules	2019-07-15 16:05:59 -07:00
__init__.py	Move unit tests into tests.unit	2015-03-11 17:03:54 -05:00
client_fixtures.py	Add validation of app cred access rules	2019-07-15 16:05:59 -07:00
test_access_rules.py	Add validation of app cred access rules	2019-07-15 16:05:59 -07:00
test_ec2_token_middleware.py	Fix D204 PEP257 violation and enable D301 and D209	2016-05-06 16:36:15 +00:00
test_entry_points.py	Define entry points for filter factories for Paste Deployment	2015-11-06 12:16:44 -06:00
test_fixtures.py	Add project_name to the auth_token fixture	2016-01-13 15:10:36 +11:00
test_opts.py	Add validation of app cred access rules	2019-07-15 16:05:59 -07:00
test_s3_token_middleware.py	Rename auth_uri to www_authenticate_uri	2017-10-11 14:00:49 +02:00
utils.py	use oslo.log instead of logging	2017-01-13 03:24:18 +00:00