Stop returning correct password on api calls
Captured invalid signature exception in authentication step, so that the problem is not returning exception to user, revealing the real password. Fixes bug 868360. Change-Id: Idb31f076a7b14309f0fda698261de816924da354
This commit is contained in:
committed by
Stanislaw Pitucha
parent
342fb9feee
commit
77c741b41c
1
Authors
1
Authors
@@ -1,6 +1,7 @@
|
|||||||
Aaron Lee <aaron.lee@rackspace.com>
|
Aaron Lee <aaron.lee@rackspace.com>
|
||||||
Adam Gandelman <adamg@canonical.com>
|
Adam Gandelman <adamg@canonical.com>
|
||||||
Adam Johnson <adjohn@gmail.com>
|
Adam Johnson <adjohn@gmail.com>
|
||||||
|
Ahmad Hassan <ahmad.hassan@hp.com>
|
||||||
Alex Meade <alex.meade@rackspace.com>
|
Alex Meade <alex.meade@rackspace.com>
|
||||||
Alexander Sakhnov <asakhnov@mirantis.com>
|
Alexander Sakhnov <asakhnov@mirantis.com>
|
||||||
Andrey Brindeyev <abrindeyev@griddynamics.com>
|
Andrey Brindeyev <abrindeyev@griddynamics.com>
|
||||||
|
|||||||
@@ -149,11 +149,7 @@ class User(AuthBase):
|
|||||||
return AuthManager().is_project_manager(self, project)
|
return AuthManager().is_project_manager(self, project)
|
||||||
|
|
||||||
def __repr__(self):
|
def __repr__(self):
|
||||||
return "User('%s', '%s', '%s', '%s', %s)" % (self.id,
|
return "User('%s', '%s')" % (self.id, self.name)
|
||||||
self.name,
|
|
||||||
self.access,
|
|
||||||
self.secret,
|
|
||||||
self.admin)
|
|
||||||
|
|
||||||
|
|
||||||
class Project(AuthBase):
|
class Project(AuthBase):
|
||||||
@@ -200,9 +196,7 @@ class Project(AuthBase):
|
|||||||
return AuthManager().get_credentials(user, self)
|
return AuthManager().get_credentials(user, self)
|
||||||
|
|
||||||
def __repr__(self):
|
def __repr__(self):
|
||||||
return "Project('%s', '%s', '%s', '%s', %s)" % \
|
return "Project('%s', '%s')" % (self.id, self.name)
|
||||||
(self.id, self.name, self.project_manager_id, self.description,
|
|
||||||
self.member_ids)
|
|
||||||
|
|
||||||
|
|
||||||
class AuthManager(object):
|
class AuthManager(object):
|
||||||
|
|||||||
Reference in New Issue
Block a user