yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

We now have fernet as keystone's default token provider and no one has
specifically requested support for bind. I think we're safe to move this
to Won't Fix.

** Changed in: keystone
       Status: Triaged => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1433311

Title:
  Fernet tokens don't support token bind

Status in OpenStack Identity (keystone):
  Won't Fix

Bug description:
  If you run test_v3_auth.py:TestAuth test cases against a Fernet token
  setup, the following tests will fail:

  keystone.tests.unit.test_v3_auth.TestFernetTokenProviderStuff.test_v2_v3_bind_token_intermix
  keystone.tests.unit.test_v3_auth.TestFernetTokenProviderStuff.test_verify_with_bound_token

  This is because a bind context is passed in on authentication and the
  bind context can't be validated since we don't pass it in the token
  payload explicitly.

  Failures look like the following:

  http://cdn.pasteraw.com/imxp1gulxgkqw3asjz79radfwbkv4pd

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1433311/+subscriptions