yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1797446] [NEW] Make AuthContextMiddleware more flask friendly

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Morgan Fainberg <morgan.fainberg@xxxxxxxxx>
Date: Thu, 11 Oct 2018 19:07:50 -0000
Reply-to: Bug 1797446 <1797446@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

Public bug reported:

AuthContextMiddleware requires a lot of modification of the code for
auth_token middleware. The code should be updated to ensure that there
are no-web-ob specific bits that need to be carried in keystone's tree.
This likely requires splitting the "tokenless auth" (x509) into a
separate flask-aware middleware and making KeystoneMiddleware only
require overloading the "fetch_token" method for use within Keystone.

This is a wishlist bug to eliminate the last hard dependencies within
Keystone Server on Webob and being 100% flask native (externally loaded
middleware makes no difference).

** Affects: keystone
     Importance: Wishlist
         Status: Triaged

** Affects: keystonemiddleware
     Importance: Wishlist
         Status: Triaged

** Changed in: keystone
       Status: New => Triaged

** Changed in: keystone
   Importance: Undecided => Wishlist

** Also affects: keystonemiddleware
   Importance: Undecided
       Status: New

** Changed in: keystonemiddleware
       Status: New => Triaged

** Changed in: keystonemiddleware
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1797446

Title:
  Make AuthContextMiddleware more flask friendly

Status in OpenStack Identity (keystone):
  Triaged
Status in keystonemiddleware:
  Triaged

Bug description:
  AuthContextMiddleware requires a lot of modification of the code for
  auth_token middleware. The code should be updated to ensure that there
  are no-web-ob specific bits that need to be carried in keystone's
  tree. This likely requires splitting the "tokenless auth" (x509) into
  a separate flask-aware middleware and making KeystoneMiddleware only
  require overloading the "fetch_token" method for use within Keystone.

  This is a wishlist bug to eliminate the last hard dependencies within
  Keystone Server on Webob and being 100% flask native (externally
  loaded middleware makes no difference).

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1797446/+subscriptions