yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #67564
[Bug 1597077] Re: token 'expires' padding differs between POST and GET/HEAD on Fernet tokens
The v2.0 GET /v2.0/tokens API is being removed this release [0]. Marking
this as Invalid since we won't be supporting that API anymore.
[0] https://review.openstack.org/#/c/499784/
** Changed in: keystone
Status: Triaged => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1597077
Title:
token 'expires' padding differs between POST and GET/HEAD on Fernet
tokens
Status in OpenStack Identity (keystone):
Invalid
Bug description:
We are using fernet tokens and found that with Mitaka the 'expires'
values returned by the token POST and token GET/HEAD differ when one
would expect these to be the same.
POST /v2.0/tokens
Response:
{"access": {
"token": {
"issued_at": "2016-06-28T18:48:56.000000Z",
"expires": "2016-06-28T20:48:56Z",
"id": "gAAAAABXcsaYGn-YFLOkLMfgq0JeBePL9s4WxiYbgSOyrAC83nUJhJh4c3xMTi_ZhaXkWH1S5BmvsvJwj90I_bKgiJlv5fQf7-wCdyPtTd7O_TcAleIBj7uOhcFhC1au7Fx9qnAkdg6DBIX_EiQLaC_ylB87nl05nQ",
"audit_ids": ["OGGd2bYeTQOi-ZHZ5vYqVw"]
},
"serviceCatalog": [],
"user": {
"username": "account1",
"roles_links": [],
"id": "af4012992a154f158201f0590013bc32",
"roles": [],
"name": "account1"
},
"metadata": {
"is_admin": 0,
"roles": []
}
}}
GET /v2.0/tokens/gAAAAABXcsaYGn-
YFLOkLMfgq0JeBePL9s4WxiYbgSOyrAC83nUJhJh4c3xMTi_ZhaXkWH1S5BmvsvJwj90I_bKgiJlv5fQf7-wCdyPtTd7O_TcAleIBj7uOhcFhC1au7Fx9qnAkdg6DBIX_EiQLaC_ylB87nl05nQ
Response:
{"access": {
"token": {
"issued_at": "2016-06-28T18:48:56.000000Z",
"expires": "2016-06-28T20:48:56.000000Z",
"id": "gAAAAABXcsaYGn-YFLOkLMfgq0JeBePL9s4WxiYbgSOyrAC83nUJhJh4c3xMTi_ZhaXkWH1S5BmvsvJwj90I_bKgiJlv5fQf7-wCdyPtTd7O_TcAleIBj7uOhcFhC1au7Fx9qnAkdg6DBIX_EiQLaC_ylB87nl05nQ",
"audit_ids": ["OGGd2bYeTQOi-ZHZ5vYqVw"]
},
"serviceCatalog": [],
"user": {
"username": "account1",
"roles_links": [],
"id": "af4012992a154f158201f0590013bc32",
"roles": [],
"name": "account1"
},
"metadata": {
"is_admin": 0,
"roles": []
}
}}
The POST response:"expires": "2016-06-28T20:48:56Z",
The GET response: "expires": "2016-06-28T20:48:56.000000Z",
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1597077/+subscriptions
References