delta/openstack/python-keystoneclient.git/keystoneclient/middleware/auth_token.py, branch 0.4.0

Merge "Normalize datetimes to account for tz"

2013-10-09T17:23:18+00:00

Merge "Fix H202 assertRaises Exception"

2013-10-09T16:00:36+00:00

Normalize datetimes to account for tz

2013-10-09T12:52:44+00:00

This patch makes sure that datetimes in the auth_token middleware
are normalized to account for timezone offsets.

Some of the old tests were changed to ensure that the expires string
stored in the cache is in ISO 8601 format and not a random float.

Fixes bug 1195924

Change-Id: I5917ab728193cd2aa8784c4860a96cdc17f3d43f

Merge "Refactor for testability of an upcoming change"

2013-10-07T17:17:57+00:00

Fix H202 assertRaises Exception

2013-10-04T08:54:03+00:00

Align the hacking version between test-requirement and global requirement.

The change of H202 detection from 0.6 to 0.7 in hacking is:

-    if logical_line.startswith("self.assertRaises(Exception)"):
+    if logical_line.startswith("self.assertRaises(Exception,"):

then more cases are detected by this change. Fix the exposed H202 error.

There is a special test case:
tests/v3/test_endpoints.py:test_update_invalid_interface

ref = self.new_ref(interface=uuid.uuid4().hex)

this line can not generate proper parameter for self.manager.update,
add a parameter "endpoint" for it, according to the
definition in keystoneclient/v3/endpoints.py:EndpointManager.update.

Otherwise, there will be following error after changing the Exception
to exceptions.ValidationError:
TypeError: update() takes at least 2 arguments (6 given)

Fixes Bug #1220008

Change-Id: I8f7ed7a6eebf8576a6db5fecd86b9d19a15c8d60

Merge "Log user info in auth_token middleware"

2013-10-02T22:33:40+00:00

Refactor for testability of an upcoming change

2013-10-01T15:51:48+00:00

confirm_token_not_expired() in keystoneclient/middleware/auth_token.py has
been moved out of the class to make it a function and be more testable.
Currently, there is no need to keep it within the class. An upcoming
commit makes fixes that rely on this refactor to be tested.

Change-Id: I8460a2ee663dec8be0f339735208779a3b988040

Replace HttpConnection in auth_token with Requests

2013-09-12T02:05:17+00:00

Requests is becoming the standard way of doing http communication, it
also vastly simplifies adding other authentication mechanisms. Use it in
the auth_token middleware.

This adds the ability to specify a CA file that will be used to verify a
HTTPS connections or insecure to specifically ignore HTTPS validation.

SecurityImpact
DocImpact
Partial-Bug: #1188189
Change-Id: Iae94329e7abd105bf95224d28f39f4b746b9eb70

Support client generate literal ipv6 auth_uri base on auth_host

2013-09-11T01:53:34+00:00

This patch is for fix bug 1208784. Support keystone client generate
literal ipv6 auth_uri via provided auth_host, when the auth_uri is
None.

Fixes bug 1208784

Change-Id: I226881a35a74ef668d4cd1c6829a64c94ff185d9

Log user info in auth_token middleware

2013-09-10T05:16:27+00:00

Add logging for user information (like user name, tenant_id, roles) in
the auth_token middleware. This would make tracking down issues much
easier.

Change-Id: Ife4ce29d2f8e1a338a025dda4afbd7b563f6b8c1
Implements: blueprint user-info-logging-in-auth-token-middleware