openstack
/
skyline-apiserver
Code Issues Proposed changes

fix: user login failure due to no role assignment to its default project 

This bug start from: https://review.opendev.org/c/openstack/skyline-apiserver/+/901229

Closes-Bug: #2049719
Change-Id: Icd7dbd5128dc8f4eb83a09d3304726ebb96cb074
This commit is contained in:
Wenxiang Wu 2024-01-18 14:42:13 +08:00
parent 86707c7347
commit ce10b6691f
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
skyline_apiserver/api/v1/login.py
View File

@ -93,8 +93,6 @@ async def _get_projects_and_unscope_token(
auth=unscope_auth, verify=CONF.default.cafile, timeout=constants.DEFAULT_TIMEOUT
)
default_project_id = await _get_default_project_id(session, region)
unscope_client = KeystoneClient(
session=session,
endpoint=auth_url,
@ -110,6 +108,8 @@ async def _get_projects_and_unscope_token(
if not project_scope:
raise Exception("You are not authorized for any projects or domains.")
default_project_id = await _get_default_project_id(session, region)
return project_scope, unscope_token, default_project_id
@ -182,6 +182,8 @@ async def login(
project_enabled=True,
)
if default_project_id not in [i.id for i in project_scope]:
default_project_id = None
project_scope_token = await get_project_scope_token(
keystone_token=unscope_token,
region=credential.region,
@ -277,6 +279,8 @@ async def websso(
project_enabled=True,
)
if default_project_id not in [i.id for i in project_scope]:
default_project_id = None
project_scope_token = await get_project_scope_token(
keystone_token=token,
region=CONF.openstack.sso_region,