3aa18b2450
Add support for composite authentication using a new 'service token' in addition to the existing 'user token'. If no service token is present there is no change in current behaviour. If a service token is present and successfully validated then additional wsgi environment variables are set which services may use to allow or deny actions in conjunction with the existing environment variables. For now delayed authentication is not supported for service tokens; if a service token is present but invalid then HTTP Unauthorized (401) will be returned. Change-Id: Idb97c075a59d716af8bc56875785b825625bf0c9 Implements: bp service-tokens
Middleware for the OpenStack Identity API (Keystone)
This package contains middleware modules designed to provide
authentication and authorization features to web services other than
Keystone
<https://github.com/openstack/keystone>. The most prominent
module is keystonemiddleware.auth_token. This package does
not expose any CLI or Python API features.
The source is available on GitHub at:
Bugs and feature requests are tracked on Launchpad at:
For any other information, refer to the parent project, Keystone:
For information on contributing, see
CONTRIBUTING.rst.