ankitagrawal ebeca911fa Redact x-subject-token from response headers ...

When you invoke any OpenStack API of any of the OpenStack services
e.g. glance, neutron, cinder, heat, ceilometer, nova, keystone
then it logs readable x-subject-token at the debug log level in the
respective log files.

Simply redacting the x-subject-token in keystone client response header
before logging it.

SecurityImpact
Closes-Bug: #1371355
Change-Id: Iac16c6358250677544761beea9f5c5d8ba29afac

2014-09-24 23:52:46 -07:00

..

apiclient

Use keystoneclient.exceptions

2014-07-23 15:53:56 +02:00

auth

Enumerate Projects with Unscoped Tokens

2014-09-23 13:47:35 +00:00

generic

Convert httpretty to requests-mock

2014-07-30 05:04:25 +10:00

v2_0

Fix test mistake with requests-mock

2014-08-31 21:38:05 +10:00

v3

Merge "SAML2 federated authentication for ADFS."

2014-09-21 06:49:52 +00:00

__init__.py

Move tests in keystoneclient

2013-09-24 12:34:17 +10:00

client_fixtures.py

auth_token middleware hashes tokens with configurable algorithm

2014-05-27 18:39:29 -07:00

test_auth_token_middleware.py

Merge "Fix the condition expression for ssl_insecure"

2014-09-21 14:27:53 +00:00

test_base.py

Replace assertEqual(None, *) with assertIsNone in tests

2014-02-18 20:47:56 +08:00

test_cms.py

Adjust Python 2.6 OSerror-on-EPIPE workaround

2014-06-16 16:23:29 +02:00

test_discovery.py

Versioned Endpoint hack for Sessions

2014-09-16 10:41:55 +10:00

test_ec2utils.py

fix EC2 Signature Version 4 calculation, in the case of POST

2014-09-01 08:06:07 +09:00

test_fixtures.py

Fix mistakes in token fixtures

2014-07-16 14:22:13 +10:00

test_http.py

Convert httpretty to requests-mock

2014-07-30 05:04:25 +10:00

test_https.py

Don't use a connection pool unless provided

2014-03-21 16:59:09 +10:00

test_keyring.py

Update keystoneclient code to account for hacking 0.9.2

2014-06-19 22:14:47 -04:00

test_memcache_crypt.py

Merge "Remove vim header"

2014-02-13 03:43:31 +00:00

test_s3_token_middleware.py

Convert httpretty to requests-mock

2014-07-30 05:04:25 +10:00

test_session.py

Redact x-subject-token from response headers

2014-09-24 23:52:46 -07:00

test_shell.py

Do not iterate action.choices if it is none

2014-09-21 21:58:48 +02:00

test_utils.py

Using six.u('') instead of u''

2014-06-15 11:14:08 +08:00

utils.py

Convert httpretty to requests-mock

2014-07-30 05:04:25 +10:00