openstack/swift
Code Issues Proposed changes

Clarify staticweb configuration with keystone.

Browse Source 
Since staticweb works with anonymous requests by default, explictly
mention delay_auth_decision for the authtoken middleware in
/etc/swift/proxy-server.conf.

Change-Id: I4879884b22224843cf9d4a50ba3359fac36957dc
This commit is contained in:
Sascha Peilicke 2013-08-05 15:36:48 +02:00
parent 06402c05af
commit 5f43e257e9
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
swift/common/middleware/keystoneauth.py
View File

@ -38,9 +38,9 @@ class KeystoneAuth(object):
installing keystone. installing keystone.
If support is required for unvalidated users (as with anonymous If support is required for unvalidated users (as with anonymous
access) or for tempurl/formpost middleware, authtoken will need access) or for formpost/staticweb/tempurl middleware, authtoken will
to be configured with ``delay_auth_decision`` set to 1. See the need to be configured with ``delay_auth_decision`` set to true. See
Keystone documentation for more detail on how to configure the the Keystone documentation for more detail on how to configure the
authtoken middleware. authtoken middleware.
In proxy-server.conf you will need to have the setting account In proxy-server.conf you will need to have the setting account

7
swift/common/middleware/staticweb.py
View File

@ -16,8 +16,11 @@
""" """
This StaticWeb WSGI middleware will serve container data as a static web site This StaticWeb WSGI middleware will serve container data as a static web site
with index file and error file resolution and optional file listings. This mode with index file and error file resolution and optional file listings. This mode
is normally only active for anonymous requests. If you want to use it with is normally only active for anonymous requests. When using keystone for
authenticated requests, set the ``X-Web-Mode: true`` header on the request. authentication set ``delay_auth_decision = true`` in the authtoken middleware
configuration in your ``/etc/swift/proxy-server.conf`` file. If you want to
use it with authenticated requests, set the ``X-Web-Mode: true`` header on the
request.
The ``staticweb`` filter should be added to the pipeline in your The ``staticweb`` filter should be added to the pipeline in your
``/etc/swift/proxy-server.conf`` file just after any auth middleware. Also, the ``/etc/swift/proxy-server.conf`` file just after any auth middleware. Also, the