ankitagrawal ebeca911fa Redact x-subject-token from response headers ...

When you invoke any OpenStack API of any of the OpenStack services
e.g. glance, neutron, cinder, heat, ceilometer, nova, keystone
then it logs readable x-subject-token at the debug log level in the
respective log files.

Simply redacting the x-subject-token in keystone client response header
before logging it.

SecurityImpact
Closes-Bug: #1371355
Change-Id: Iac16c6358250677544761beea9f5c5d8ba29afac

2014-09-24 23:52:46 -07:00

..

apiclient

Imports to fix build warnings

2014-06-18 19:12:39 -05:00

auth

Versioned Endpoint hack for Sessions

2014-09-16 10:41:55 +10:00

common

Adjust Python 2.6 OSerror-on-EPIPE workaround

2014-06-16 16:23:29 +02:00

contrib

Merge "SAML2 federated authentication for ADFS."

2014-09-21 06:49:52 +00:00

fixture

Handle federated tokens

2014-09-17 15:46:49 -04:00

generic

Prefer () to continue line per PEP8

2014-04-04 16:11:50 -05:00

locale

enabling i18n with Babel

2012-09-29 16:03:23 -07:00

middleware

Fix auth_token for old oslo.config

2014-09-22 12:48:20 -05:00

openstack

Sync with latest oslo-incubator

2014-09-09 13:57:39 -07:00

tests

Redact x-subject-token from response headers

2014-09-24 23:52:46 -07:00

v2_0

Fix a doc_string error

2014-09-18 16:26:32 +08:00

v3

Enumerate Projects with Unscoped Tokens

2014-09-23 13:47:35 +00:00

__init__.py

Merge "Docstrings for usability."

2014-07-15 12:14:59 +00:00

_discover.py

Versioned Endpoint hack for Sessions

2014-09-16 10:41:55 +10:00

access.py

Handle federated tokens

2014-09-17 15:46:49 -04:00

adapter.py

Allow retrying some failed requests

2014-09-16 10:59:29 +10:00

base.py

Enumerate Projects with Unscoped Tokens

2014-09-23 13:47:35 +00:00

baseclient.py

Remove vim header

2014-02-08 22:22:08 +08:00

client.py

Remove vim header

2014-02-08 22:22:08 +08:00

discover.py

Versioned Endpoint hack for Sessions

2014-09-16 10:41:55 +10:00

exceptions.py

remove useless part of error message

2014-07-15 12:43:25 -05:00

httpclient.py

Merge "Move fake session to HTTPClient"

2014-08-26 00:24:08 +00:00

service_catalog.py

Merge "fixed typos found by RETF rules"

2014-05-03 21:42:31 +00:00

session.py

Redact x-subject-token from response headers

2014-09-24 23:52:46 -07:00

shell.py

Do not iterate action.choices if it is none

2014-09-21 21:58:48 +02:00

utils.py

Revert "Use oslo.utils"

2014-08-17 13:52:12 -07:00