diff options
| author | Brant Knudson <bknudson@us.ibm.com> | 2016-01-14 16:22:04 -0600 |
|---|---|---|
| committer | Brant Knudson <bknudson@us.ibm.com> | 2016-01-14 16:22:04 -0600 |
| commit | 04f9f33b4b6079d39c3feea0b1ec1211a1de6a04 (patch) | |
| tree | f06921e02d07210132830987a7e8fb4ee460f8eb /keystoneclient/auth | |
| parent | 977fc4c92c834e5f9124b8f18b3ebb68abb2a1f1 (diff) | |
| download | python-keystoneclient-04f9f33b4b6079d39c3feea0b1ec1211a1de6a04.tar.gz | |
Mark password/secret options as secret
Password, token, and secret options should be marked as secret=True
so that when the value is logged the logger knows to obfuscate the
value.
Change-Id: I6ebdfa3bf6faf37bc11640a5826b3b55bb920fc4
Closes-Bug: 1534299
Diffstat (limited to 'keystoneclient/auth')
| -rw-r--r-- | keystoneclient/auth/identity/generic/cli.py | 1 | ||||
| -rw-r--r-- | keystoneclient/auth/identity/generic/password.py | 2 | ||||
| -rw-r--r-- | keystoneclient/auth/identity/generic/token.py | 2 |
3 files changed, 3 insertions, 2 deletions
diff --git a/keystoneclient/auth/identity/generic/cli.py b/keystoneclient/auth/identity/generic/cli.py index c493850..212e9b7 100644 --- a/keystoneclient/auth/identity/generic/cli.py +++ b/keystoneclient/auth/identity/generic/cli.py @@ -38,6 +38,7 @@ class DefaultCLI(password.Password): options.extend([cfg.StrOpt('endpoint', help='A URL to use instead of a catalog'), cfg.StrOpt('token', + secret=True, help='Always use the specified token')]) return options diff --git a/keystoneclient/auth/identity/generic/password.py b/keystoneclient/auth/identity/generic/password.py index 3c4180c..3527b19 100644 --- a/keystoneclient/auth/identity/generic/password.py +++ b/keystoneclient/auth/identity/generic/password.py @@ -30,7 +30,7 @@ def get_options(): deprecated_name='user-name'), cfg.StrOpt('user-domain-id', help="User's domain id"), cfg.StrOpt('user-domain-name', help="User's domain name"), - cfg.StrOpt('password', help="User's password"), + cfg.StrOpt('password', secret=True, help="User's password"), ] diff --git a/keystoneclient/auth/identity/generic/token.py b/keystoneclient/auth/identity/generic/token.py index 0fbacf0..6a5d15b 100644 --- a/keystoneclient/auth/identity/generic/token.py +++ b/keystoneclient/auth/identity/generic/token.py @@ -24,7 +24,7 @@ LOG = logging.getLogger(__name__) def get_options(): return [ - cfg.StrOpt('token', help='Token to authenticate with'), + cfg.StrOpt('token', secret=True, help='Token to authenticate with'), ] |