diff options
| author | Henry Nash <henryn@linux.vnet.ibm.com> | 2013-03-04 05:05:15 +0000 |
|---|---|---|
| committer | Henry Nash <henryn@linux.vnet.ibm.com> | 2013-03-11 11:50:09 +0000 |
| commit | d782a998474d92d4299b4404b69442f0288efc3b (patch) | |
| tree | 4ada0437add2a199329f77b0043cd4094f20b4a1 /examples/pki/gen_pki.sh | |
| parent | ae36809fdecdedd09abf23eeadf2374c77b8a8df (diff) | |
| download | python-keystoneclient-d782a998474d92d4299b4404b69442f0288efc3b.tar.gz | |
Fix auth-token middleware to understand v3 tokens
Now that the Identity server supports v3 tokens, the auth_token
middleware should permit the in-line validation of such a token. This
essentially means just setting any new environment items
that correspond to the new attributes that may be in a v3 token (such
as domains), as well as allowing for the slight format differences.
Most of the work in this change is actually in the unit tests, where
it was important to try and enable the existing tests to be run against
an auth_token middleware configured for both v2 and v3. This meant
restructing the test class so that the token format is separated
from the individual tests and is initialized by the class Setup().
Since there are some new signed token formats included in this testing,
a new set of the signed tokens was generated.
Fixes Bug #1132390
Change-Id: I78b232d30f5310c39089fbbc8e56c23df291f89f
Diffstat (limited to 'examples/pki/gen_pki.sh')
| -rwxr-xr-x | examples/pki/gen_pki.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/examples/pki/gen_pki.sh b/examples/pki/gen_pki.sh index 9bf6c32..5cea13e 100755 --- a/examples/pki/gen_pki.sh +++ b/examples/pki/gen_pki.sh @@ -203,7 +203,7 @@ function check_openssl { } function gen_sample_cms { - for json_file in "${CMS_DIR}/auth_token_revoked.json" "${CMS_DIR}/auth_token_unscoped.json" "${CMS_DIR}/auth_token_scoped.json" "${CMS_DIR}/revocation_list.json" + for json_file in "${CMS_DIR}/auth_token_revoked.json" "${CMS_DIR}/auth_token_unscoped.json" "${CMS_DIR}/auth_token_scoped.json" "${CMS_DIR}/revocation_list.json" "${CMS_DIR}/auth_v3_token_scoped.json" "${CMS_DIR}/auth_v3_token_revoked.json" do openssl cms -sign -in $json_file -nosmimecap -signer $CERTS_DIR/signing_cert.pem -inkey $PRIVATE_DIR/signing_key.pem -outform PEM -nodetach -nocerts -noattr -out ${json_file/.json/.pem} done |