yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

Public bug reported:

Apparently the v2.0 API has a query parameter that allows you to check
if a token belongs to a tenant by passing the tenant name in the query
parameter. Out tests ensure that the functionality is broken [0].

The assertion in the test assumes that you can pass the tenant name -
but the actual implementation of belongsTo checks for the tenant ID [1].
The implementation needs to be fixed to compare tenant names or the
tests need to be refactored to pass the tenant ID.


[0] https://github.com/openstack/keystone/blob/dc9a1d5f7061f2de6b75a79ad3133d9e3c14046a/keystone/tests/unit/test_auth.py#L419-L439
[1] https://github.com/openstack/keystone/blob/dc9a1d5f7061f2de6b75a79ad3133d9e3c14046a/keystone/token/provider.py#L354-L365

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1627085

Title:
  The belongsTo query parameters for v2.0 is broken

Status in OpenStack Identity (keystone):
  New

Bug description:
  Apparently the v2.0 API has a query parameter that allows you to check
  if a token belongs to a tenant by passing the tenant name in the query
  parameter. Out tests ensure that the functionality is broken [0].

  The assertion in the test assumes that you can pass the tenant name -
  but the actual implementation of belongsTo checks for the tenant ID
  [1]. The implementation needs to be fixed to compare tenant names or
  the tests need to be refactored to pass the tenant ID.

  
  [0] https://github.com/openstack/keystone/blob/dc9a1d5f7061f2de6b75a79ad3133d9e3c14046a/keystone/tests/unit/test_auth.py#L419-L439
  [1] https://github.com/openstack/keystone/blob/dc9a1d5f7061f2de6b75a79ad3133d9e3c14046a/keystone/token/provider.py#L354-L365

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1627085/+subscriptions