yahoo-eng-team team mailing list archive

[Morgan Fainberg <morgan.fainberg@xxxxxxxxx>]

Depending on how the token was originally issued (v2 or v3) you will get
either a microsecond aware or non-microsecond aware token on either the
v2 or the v3 interface.

This looks like it is a change in behavior, but it is only slightly so
as it is possible to get either formats for the expires string even
before the fernet tokens.

For the purposes of defcore (allowed to get trademark logos etc) and
other systems (tempest) we allow either format. Fernet tokens are simply
more consistent (always microsecond included) than the previous formats.

I'm going to mark this as "invalid" since we cannot (previously)
guarantee the token expires format is with/without microseconds, but
fernet is ensuring we are more consistent.

** Changed in: keystone
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1469458

Title:
  Fernet tokens use different string format for expires time

Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  The change in format breaks parsing the 'expires' string in existing
  applications. Is this an intentional change?

  # keystone --debug token-get
  /usr/local/lib/python2.7/dist-packages/keystoneclient/shell.py:64: DeprecationWarning: The keystone CLI is deprecated in favor of python-openstackclient. For a Python library, continue using python-keystoneclient.
    'python-keystoneclient.', DeprecationWarning)
  DEBUG:keystoneclient.auth.identity.v2:Making authentication request to http://172.29.236.3:5000/v2.0/tokens
  INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 172.29.236.3
  DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3574
  +-----------+----------------------------------+
  |  Property |              Value               |
  +-----------+----------------------------------+
  |  expires  |       2015-06-28T08:28:34Z       |
  |     id    | 1a50033b3a094828a8cde4cbf12024ed |
  | tenant_id | a3a5cf8eb83f416db3878731bd9e6453 |
  |  user_id  | ad39420d02c04c2da946b92d28b710c0 |
  +-----------+----------------------------------+

  
  # keystone --debug token-get
  /usr/local/lib/python2.7/dist-packages/keystoneclient/shell.py:64: DeprecationWarning: The keystone CLI is deprecated in favor of python-openstackclient. For a Python library, continue using python-keystoneclient.
    'python-keystoneclient.', DeprecationWarning)
  DEBUG:keystoneclient.auth.identity.v2:Making authentication request to http://172.29.236.3:5000/v2.0/tokens
  INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 172.29.236.3
  DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 4193
  +-----------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
  |  Property |                                                                                           Value                                                                                            |
  +-----------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
  |  expires  |                                                                                2015-06-28T08:39:41.644518Z                                                                                 |
  |     id    | gAAAAABVjwoNAZCVs00uR16DkY9mCqd5CivXy7UXRpYldZTlTTVYRj2hhpIXpLnOFrPSFZwSu-6xjSNSTZ5WCupiV8fpQ9RbNjw5lroBqzS2qCgh1WPpPYQiiul0MED6hKk-AQH-Of72OjpriHHoronHrtwIu-POnL20_8akatQm6Y-Y42aQz9w%3D |
  | tenant_id |                                                                              010d5126c9714ced8cf5be87eb2cec5b                                                                              |
  |  user_id  |                                                                              2156173ddaf04f29b66345768b42ca61                                                                              |
  +-----------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1469458/+subscriptions