yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #15182
[Bug 1071852] Re: Check revocation list for tokens stored in memcached
This appears to actually be
https://bugs.launchpad.net/keystone/+bug/1312858 which has been fixed
and released.
** Changed in: keystone
Status: Triaged => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1071852
Title:
Check revocation list for tokens stored in memcached
Status in OpenStack Identity (Keystone):
Invalid
Bug description:
The token revocation list will not be checked for revoked tokens.
Once a token has been verified, it can be safely stored for the
lifetime of the token in memcached, but it should still be checked
against the token verification list . The current logic is to time it
out of the cache (cache is set for a short period of time) and
reverify the whole token.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1071852/+subscriptions