auth_token does not quote token to validate
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Won't Fix
|
Medium
|
Unassigned | ||
Essex |
Invalid
|
Undecided
|
Unassigned | ||
python-keystoneclient |
Fix Released
|
Low
|
Dolph Mathews |
Bug Description
When we are sending a bogus token with a space to validate like :
"foo bar"
I am getting this error message :
File "/opt/stack/
return self.app(env, my_start_response)
File "/opt/stack/
return self.app(env, start_response)
File "/opt/stack/
return self.app(env, start_response)
File "/opt/stack/
return self.app(env, start_response)
File "/opt/stack/
return self.app(environ, start_response)
File "/opt/stack/
user_headers = self._build_
File "/opt/stack/
user = token_info[
KeyError: 'access' (txn: txfa72e0ad18394
Reason seems to be because on auth_token.py the token sent to keystone to validate is unquoted and sent as is which come back as a 200.
I am not entirely sure if this is httplib or keystone coming back as 200 here is a snippet describing what i mean :
http://
See the second test (unquote with a space) will return as 200.
Fixing the problem by quoting token before validating in keystone is trivial to fix the problem but I wonder if there is more to that.
Changed in keystone: | |
assignee: | nobody → Chmouel Boudjnah (chmouel) |
tags: | added: essex-backport-potential |
summary: |
- auh_token does not quote token to validate + auth_token does not quote token to validate |
tags: |
added: essex-backport removed: essex-backport-potential |
Changed in keystone: | |
importance: | Undecided → Medium |
tags: | removed: essex-backport |
Changed in python-keystoneclient: | |
assignee: | nobody → Dolph Mathews (dolph) |
status: | New → In Progress |
Changed in python-keystoneclient: | |
milestone: | none → 0.2.1 |
status: | Fix Committed → Fix Released |
importance: | Undecided → Low |
Fix proposed to branch: master /review. openstack. org/6276
Review: https:/