do not depend on protocol specific id's when creating a federation token

[Steve Martinelli]

If token.provider.common we have a check before issuing a federation that checks if the method name used agrees with a hard coded protocol name.

  i.e.: if 'saml2' in method_names or 'oidc' in method_names

this should be done in a more dynamic way, so if more auth methods are supported, then they are automatically seen as federation methods.

fix 1: potentially have a federation_methods in [auth] that lists valid federation methods (very similar to methods in [auth])
fix 2: check the method name against protocol list ids

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/133130

[Steve Martinelli (stevemar)]

i think fix #2 makes the most sense

[Rodrigo Duarte (rodrigodsousa)]

The first solution was implementing the fix #2. But seems that the "protocol_id" doesn't need to follow the auth methods names defined in keystone.conf.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/133130
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=10a592d89c819544770fe8e786a4805721693184
Submitter: Jenkins
Branch: master

commit 10a592d89c819544770fe8e786a4805721693184
Author: Rodrigo Duarte Sousa <email address hidden>
Date: Thu Nov 6 22:06:18 2014 -0300

    Adds dynamic checking for mapped tokens

    Avoids having to manually add protocols to check if it is a mapped
    token. This check is done by using the identity_provider and protocol
    fields in token, if they are present, means the token being analysed
    is a mapped one.

    Co-Authored-By: Marek Denis <email address hidden>

    Change-Id: I5a695fa2efa8da151158a15c3b7ec8885d57c2d1
    Closes-Bug: 1390100

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: feature/hierarchical-multitenancy
Review: https://review.openstack.org/138182

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: feature/hierarchical-multitenancy
Review: https://review.openstack.org/138182