yahoo-eng-team team mailing list archive

[prashkre <1817769@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

In stein, with use of token caching, token deserialization is returning
list object instead of keystone.models.token_model.TokenModel object
causing it to fail in token validation.


2019-02-26 12:59:07.813 12027 WARNING keystone.server.flask.application [req-352b9795-976e-4346-8bca-00692b814ad5 - - - - -] Authorization failed. The request you have made requires authentication. from 9.114.192.69: Unauthorized: The request you have made requires authentication.
2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider [req-16223960-fb19-4879-b4b2-ea409e4929c3 f539d5d1e792c11dd599a0a30e2603027798f38069147c5b5ec6144e7755d849 b4f8a3e36a844d31b9a0e3e7a9336ef7 - d2cfac6ed5cc481ab91bdeeea6af8e83 d2cfac6ed5cc481ab91bdeeea6af8e83] Unexpected error or malformed token determining token expiry: [126, '\xde\x00\x1e\xc4\x07methods\x91\xa8password\xc4\x19application_credential_id\xc0\xc4\x0fparent_audit_id\xc0\xc4\x16_TokenModel__issued_at\xc4\x1b2019-02-26T17:59:07.000000Z\xc4\tdomain_id\xc0\xc4\x08trust_id\xc0\xc4\x1a_TokenModel__trust_project\xc0\xc4\x07user_id\xd9@9db61c6bad18659d2d6f33e566e7cd6d55828c1b4a67365403760e2cae431dca\xc4\x06system\xc0\xc4\x02id\xd9\xf7gAAAAABcdX5raSAPS7bacoMPpETPCL3jXN_ryZXtgvh_I2tVMaL6nh4LJS3XPAbLrUh5xcwKu1PNAb0OUmSQQ5Rc1PK15ReYzz8mjzcMn4UMbpaMARRdSkk7fPK5n21sfhAV2DPJJy2uOUlEl3iInPAiUVHgcRnXLkr0gfr0dGYCJxul5ODNn85ItemuejLreKo25d4GK0xPmraeV5xSr0i30PDTzDVmuKQE_zs5vWQuNV89D1KvnQc\xc4\x13_TokenModel__domain\xc0\xc4\x0faccess_token_id\xc0\xc4\x18_TokenModel__user_domain\x85\xc4\x0bdescription\xd9#Domain for service users and groups\xc4\x07enabled\xc3\xc4\x02id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7Service\xc4\x04tags\x90\xc4\x1b_TokenModel__project_domain\x85\xc4\x0bdescription\xd9#Domain for service users and groups\xc4\x07enabled\xc3\xc4\x02id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7Service\xc4\x04tags\x90\xc4\x08audit_id\xb65gQ3yU0RQ5yI-ZDp_-PdNQ\xc4\x14_TokenModel__trustee\xc0\xc4\x14_TokenModel__trustor\xc0\xc4\x19_TokenModel__access_token\xc0\xc4\x17_TokenModel__expires_at\xc4\x1b2019-02-26T23:59:07.000000Z\xc4\x10federated_groups\xc0\xc4\x0euser_domain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x0bprotocol_id\xc0\xc4\x12_TokenModel__trust\xc0\xc4#_TokenModel__application_credential\xc0\xc4\x0cis_federated\xc2\xc4\nproject_id\xd9 b4f8a3e36a844d31b9a0e3e7a9336ef7\xc4!_TokenModel__trust_project_domain\xc0\xc4\x14identity_provider_id\xc0\xc4\x11_TokenModel__user\x87\xc4\x13password_expires_at\xc0\xabdescription\xa9nova user\xc4\x07enabled\xc3\xc4\tdomain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x07options\x80\xc4\x02id\xd9@9db61c6bad18659d2d6f33e566e7cd6d55828c1b4a67365403760e2cae431dca\xc4\x04name\xa4nova\xc4\x14_TokenModel__project\x88\xc4\tis_domain\xc2\xc4\x0bdescription\xd9/IBM Service Tenant for service users and groups\xc4\x04tags\x90\xc4\x07enabled\xc3\xc4\x02id\xd9 b4f8a3e36a844d31b9a0e3e7a9336ef7\xc4\tparent_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\tdomain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7service']: AttributeError: 'list' object has no attribute 'expires_at'
2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider Traceback (most recent call last):
2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider   File "/usr/lib/python2.7/site-packages/keystone/token/provider.py", line 184, in _is_valid_token
2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider     expiry = timeutils.parse_isotime(token.expires_at)
2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider AttributeError: 'list' object has no attribute 'expires_at'

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1817769

Title:
  Token validation failing with use of token caching.

Status in OpenStack Identity (keystone):
  New

Bug description:
  In stein, with use of token caching, token deserialization is
  returning list object instead of
  keystone.models.token_model.TokenModel object causing it to fail in
  token validation.

  
  2019-02-26 12:59:07.813 12027 WARNING keystone.server.flask.application [req-352b9795-976e-4346-8bca-00692b814ad5 - - - - -] Authorization failed. The request you have made requires authentication. from 9.114.192.69: Unauthorized: The request you have made requires authentication.
  2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider [req-16223960-fb19-4879-b4b2-ea409e4929c3 f539d5d1e792c11dd599a0a30e2603027798f38069147c5b5ec6144e7755d849 b4f8a3e36a844d31b9a0e3e7a9336ef7 - d2cfac6ed5cc481ab91bdeeea6af8e83 d2cfac6ed5cc481ab91bdeeea6af8e83] Unexpected error or malformed token determining token expiry: [126, '\xde\x00\x1e\xc4\x07methods\x91\xa8password\xc4\x19application_credential_id\xc0\xc4\x0fparent_audit_id\xc0\xc4\x16_TokenModel__issued_at\xc4\x1b2019-02-26T17:59:07.000000Z\xc4\tdomain_id\xc0\xc4\x08trust_id\xc0\xc4\x1a_TokenModel__trust_project\xc0\xc4\x07user_id\xd9@9db61c6bad18659d2d6f33e566e7cd6d55828c1b4a67365403760e2cae431dca\xc4\x06system\xc0\xc4\x02id\xd9\xf7gAAAAABcdX5raSAPS7bacoMPpETPCL3jXN_ryZXtgvh_I2tVMaL6nh4LJS3XPAbLrUh5xcwKu1PNAb0OUmSQQ5Rc1PK15ReYzz8mjzcMn4UMbpaMARRdSkk7fPK5n21sfhAV2DPJJy2uOUlEl3iInPAiUVHgcRnXLkr0gfr0dGYCJxul5ODNn85ItemuejLreKo25d4GK0xPmraeV5xSr0i30PDTzDVmuKQE_zs5vWQuNV89D1KvnQc\xc4\x13_TokenModel__domain\xc0\xc4\x0faccess_token_id\xc0\xc4\x18_TokenModel__user_domain\x85\xc4\x0bdescription\xd9#Domain for service users and groups\xc4\x07enabled\xc3\xc4\x02id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7Service\xc4\x04tags\x90\xc4\x1b_TokenModel__project_domain\x85\xc4\x0bdescription\xd9#Domain for service users and groups\xc4\x07enabled\xc3\xc4\x02id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7Service\xc4\x04tags\x90\xc4\x08audit_id\xb65gQ3yU0RQ5yI-ZDp_-PdNQ\xc4\x14_TokenModel__trustee\xc0\xc4\x14_TokenModel__trustor\xc0\xc4\x19_TokenModel__access_token\xc0\xc4\x17_TokenModel__expires_at\xc4\x1b2019-02-26T23:59:07.000000Z\xc4\x10federated_groups\xc0\xc4\x0euser_domain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x0bprotocol_id\xc0\xc4\x12_TokenModel__trust\xc0\xc4#_TokenModel__application_credential\xc0\xc4\x0cis_federated\xc2\xc4\nproject_id\xd9 b4f8a3e36a844d31b9a0e3e7a9336ef7\xc4!_TokenModel__trust_project_domain\xc0\xc4\x14identity_provider_id\xc0\xc4\x11_TokenModel__user\x87\xc4\x13password_expires_at\xc0\xabdescription\xa9nova user\xc4\x07enabled\xc3\xc4\tdomain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x07options\x80\xc4\x02id\xd9@9db61c6bad18659d2d6f33e566e7cd6d55828c1b4a67365403760e2cae431dca\xc4\x04name\xa4nova\xc4\x14_TokenModel__project\x88\xc4\tis_domain\xc2\xc4\x0bdescription\xd9/IBM Service Tenant for service users and groups\xc4\x04tags\x90\xc4\x07enabled\xc3\xc4\x02id\xd9 b4f8a3e36a844d31b9a0e3e7a9336ef7\xc4\tparent_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\tdomain_id\xd9 d2cfac6ed5cc481ab91bdeeea6af8e83\xc4\x04name\xa7service']: AttributeError: 'list' object has no attribute 'expires_at'
  2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider Traceback (most recent call last):
  2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider   File "/usr/lib/python2.7/site-packages/keystone/token/provider.py", line 184, in _is_valid_token
  2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider     expiry = timeutils.parse_isotime(token.expires_at)
  2019-02-26 12:59:08.228 12027 ERROR keystone.token.provider AttributeError: 'list' object has no attribute 'expires_at'

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1817769/+subscriptions