OAuth dependency is not resolved prior to starting server

[Anton Frolov]

There is no possible way to use OAuth for authentication. Problem is that self.oauth_api is always None on this line: https://github.com/openstack/keystone/blob/cc0c6565e3fe6ed60543e6ebd5e54cba51e59fc6/keystone/token/providers/common.py#L398 .

So even if OAuth is enabled, after trying to authenticate using OAuth you get {"error": {"message": "Oauth is disabled.", "code": 403, "title": "Forbidden"}}.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/64349

[Adam Young (ayoung)]

This has been tested...I think you are configuring it wrong. You need to enable oauth in the paste pipeline.

[Dolph Mathews (dolph)]

Related docs: http://docs.openstack.org/developer/keystone/extensions/oauth1-configuration.html

[Anton Frolov (anton0)]

I configured OAuth as explained in the doc you linked, and was able to receive OAuth access token, but failed on step where you request Keystone session token via /v3/auth/tokens.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/64349
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8bf22c34fa9848e24de74ef1d72595b58352fd8e
Submitter: Jenkins
Branch: master

commit 8bf22c34fa9848e24de74ef1d72595b58352fd8e
Author: Steve Martinelli <email address hidden>
Date: Mon Jan 6 16:41:06 2014 -0600

    Resolve oauth dependency after paste pipeline is loaded

    When trying to authenticate with the oauth plugin, it is
    possible that the dependency is not yet loaded, and as a result
    the user will receive an error message: "Oauth is disabled"

    This patch will ensure the dependency is loaded after the pipeline

    Fixes: bug #1264803

    Change-Id: I37484bf844896b1a1b560923a8afaf99e91635e4