openstack team mailing list archive

[Maru Newby <mnewby@xxxxxxxxxxxx>]

I see that support for PKI Signed Tokens has been added to Keystone without support for token revocation.  I tried to raise this issue on the bug report:

https://bugs.launchpad.net/keystone/+bug/1003962/comments/4

And the review:

https://review.openstack.org/#/c/7754/

I'm curious as to whether anybody shares my concern and if there is a specific reason why nobody responded to my question as to why revocation is not required for this new token scheme.   Anybody?

Thanks,


Maru