summaryrefslogtreecommitdiff
path: root/releasenotes/notes/delay_auth_instead_of_503-f9b46bf4fbc11455.yaml
blob: 11ce28aa0b2c62213773014ee20986386120ad35 (plain)
1
2
3
4
5
6
7
8
9
---
fixes:
  - |
    When ``delay_auth_decision`` is enabled and a Keystone failure prevents
    a final decision about whether a token is valid or invalid, it will be
    marked invalid and the application will be responsible for a final auth
    decision. This is similar to what happens when a token is confirmed *not*
    valid. This allows a Keystone outage to only affect Keystone users in a
    multi-auth system.