Fernet token response has wrong methods

[Haneef Ali]

If you validate fernet token, the token response has 2 methods. Since the token is obtained using the "password" method, the response should only have "password" method

ex - token response

 "expires_at": "2015-03-14T03:06:39Z",
        "extras": {},
        "issued_at": "2015-03-09T23:06:39Z",
        "methods": [
            "password",
            "token"
        ],

[Dolph Mathews (dolph)]

I'm guessing we're going to have to encode a tuple of auth methods into each Fernet token payload. Assuming our auth method names we need to handle are well known values, it would be a waste to store the entire method names as strings, so I'd suggest trying mapping byte values to the method names in an enumeration.

A fix for this should also be based on (at least) https://review.openstack.org/#/c/160993/

[Lance Bragstad (lbragstad)]

I was working on this earlier today from a previous discussion. I wasn't aware there was a bug open for this. I can link my fix to this bug, but if there is another fix being worked, don't hesitate to incorporate it.

[Lance Bragstad (lbragstad)]

Review proposed for fixing this issue:

https://review.openstack.org/#/c/163601/

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/163601
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1053433acfd655397c811bfe87f45749e786a89c
Submitter: Jenkins
Branch: master

commit 1053433acfd655397c811bfe87f45749e786a89c
Author: Lance Bragstad <email address hidden>
Date: Wed Mar 11 15:37:00 2015 -0500

    Allow methods to be carried in Fernet tokens.

    Previously, Fernet tokens assumed the authentication method in validation. This
    change makes it so that methods is passed in the token as an integer and
    reformatted on validation.

    Closes-Bug: 1430062
    Change-Id: I2e07dd18c303a1ed98770e8b6d484d9f41b04c3b