yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1211965] Re: Unify delegate token identification

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Steve Martinelli <stevemar@xxxxxxxxxx>
Date: Sun, 21 Feb 2016 07:47:18 -0000
Reply-to: Bug 1211965 <1211965@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

refer to https://blueprints.launchpad.net/keystone/+spec/unified-
delegation

** Changed in: keystone
       Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1211965

Title:
  Unify delegate token identification

Status in OpenStack Identity (keystone):
  Invalid

Bug description:
  Trusts and OAuth both create delegated tokens that should not be
  allowed to create additional tokens.  But they are marked in separate
  ways.  We should unify the trusts and oauth tokens to both be labeled
  the same way, and have unified token processing that prevents them
  from being allowed to create new tokens.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1211965/+subscriptions