The absence of 'X-Subject-Token' header for token validation/revocation should result in 400 (bad request)

Bug #1240170 reported by Guang Yee
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Invalid
Medium
Guang Yee

Bug Description

The absence of 'X-Subject-Token' header for V3 token validation/revocation should constitute a 400 (bad request) instead of 403 or 404. Keystone currently returns 403 or 404 depending on X-Auth-Token permission.

Guang Yee (guang-yee)
Changed in keystone:
assignee: nobody → Guang Yee (guang-yee)
Dolph Mathews (dolph)
Changed in keystone:
importance: Undecided → Medium
tags: added: grizzly-backport-potential havana-backport-potential
Dolph Mathews (dolph)
Changed in keystone:
status: New → Invalid
tags: removed: grizzly-backport-potential havana-backport-potential
Revision history for this message
Guang Yee (guang-yee) wrote :

Dolph, why is this invalid? Isn't missing information constitutes bad request?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.