OpenStack Identity (Keystone) Middleware
Go to file
Jorge Merlino e05466c5f4 Remove cache invalidation when using expired token
This can create a race condition for long running services that reuse
their token (eg. Kubernetes Cinder CSI plugin) in this case for
example:

1 [user] Asks nova to attach a volume to a server
2 ...the user's token expires
3 [user] Asks cinder if the volume has been attached
4 [nova] Asks cinder to attach the volume

In step 3 the token is marked as invalid in the cache and step 4 fails
even if allow_expired is true

Closes-Bug: #1987355
Change-Id: Ice8e34440a5fe1baa370646ed70b5e085c4af70e
2022-12-12 20:16:14 +00:00
config-generator generate sample config automatically 2016-05-12 06:38:40 +00:00
doc Merge "Use unittest.mock instead of third party mock" 2020-08-24 19:38:38 +00:00
keystonemiddleware Remove cache invalidation when using expired token 2022-12-12 20:16:14 +00:00
releasenotes Imported Translations from Zanata 2022-09-06 04:09:33 +00:00
.coveragerc Update .coveragerc after the removal of respective directory 2016-10-24 18:03:12 +05:30
.gitignore Updates for stestr 2017-10-02 21:57:27 -05:00
.gitreview OpenDev Migration Patch 2019-04-19 19:35:58 +00:00
.stestr.conf Updates for stestr 2017-10-02 21:57:27 -05:00
.zuul.yaml Merge "Update Python 3 job template" 2022-05-27 17:25:27 +00:00
CONTRIBUTING.rst Use https for *.openstack.org references 2017-02-05 20:36:42 -08:00
HACKING.rst Update URLs in documentation 2017-07-20 16:38:16 +08:00
LICENSE Initial commit 2014-06-19 15:45:29 -07:00
README.rst Update invalid link for README 2019-09-18 14:47:21 +08:00
requirements.txt Drop lower-constraints.txt and its testing 2022-04-30 20:20:34 -05:00
setup.cfg OAuth2.0 Client Credentials Grant Flow Support 2022-08-23 09:39:18 +00:00
setup.py Updated from global requirements 2017-04-06 22:03:25 +00:00
test-requirements.txt Fix pep8 gate 2022-12-09 10:28:06 -06:00
tox.ini Fix pep8 gate 2022-12-09 10:28:06 -06:00

README.rst

Team and repository tags

image

Middleware for the OpenStack Identity API (Keystone)

Latest Version

Downloads

This package contains middleware modules designed to provide authentication and authorization features to web services other than Keystone <https://github.com/openstack/keystone>. The most prominent module is keystonemiddleware.auth_token. This package does not expose any CLI or Python API features.

For information on contributing, see CONTRIBUTING.rst.

For any other information, refer to the parent project, Keystone:

https://github.com/openstack/keystone