← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1527729] [NEW] keystone v3 token not find

 

You have been subscribed to a public bug:

Context : It may be a documentation "bug", but currently the
documentation is explicit about what's optional or not...and this is the
behaviour observed on devstack right now

Impact : After retrieving a scoped token with keystone v3 API on devstack, a HTTP GET with v3/auth/tokens (which is supposed to validate / give info on the token) returns a 404 "Could not find token" if you don't specify a X-Subject-Token detail.
It is marked as optional in the keystone v3 documentation...

Concerned documentation :
http://developer.openstack.org/api-ref-identity-v3.html#validateToken

Step to reproduce :
1- Get your devstack running (obviously)

2- ask for a v3 scoped token
curl -i http://<YOURDEVSTACKIP>:5000/v3/auth/tokens -X POST -H "Content-Type: application/json" -H "Accept: application/json" -d '{"auth" : {"identity" : {"methods" : ["password"], "password" : { "user" : { "name" : "admin","domain": {"name": "Default"},"password" : "password" } } }, "scope": {"project": {"name": "admin","domain": {"name": "Default"} } } } }'

3- note down the token received on the answer's HTTP response in the X-Subject-Token field :
X-Subject-Token: 41fd4e3ab0d14d37bbcc89730871bffd

4- use that same token inside your HTTP GET header to retrieve info / validation on it :
curl -i http://<YOURDEVSTACKIP>:5000/v3/auth/tokens -X GET -H "X-Auth-Token: 41fd4e3ab0d14d37bbcc89730871bffd" -H "Accept: application/json"

Sad Panda

5- now add the "X-Subject-Token" field with the same token :
curl -i http://10.211.55.3:5000/v3/auth/tokens -X GET -H "X-Auth-Token: 41fd4e3ab0d14d37bbcc89730871bffd" -H "X-Subject-Token: 41fd4e3ab0d14d37bbcc89730871bffd" -H "Accept: application/json"

6- Profit - happy panda

** Affects: keystone
     Importance: Undecided
         Status: Confirmed


** Tags: keystone
-- 
keystone v3 token not find 
https://bugs.launchpad.net/bugs/1527729
You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone).