Activity log for bug #1491926

Date Who What changed Old value New value Message
2015-09-03 16:02:03 Lance Bragstad bug added bug
2015-09-03 16:02:29 Lance Bragstad tags fernet
2015-09-03 16:03:11 Tom Cocozzello keystone: assignee Tom Cocozzello (tjcocozz)
2015-09-03 16:25:13 Dolph Mathews keystone: importance Undecided Medium
2015-09-03 16:25:13 Dolph Mathews keystone: status New Triaged
2015-09-03 16:46:59 Dolph Mathews keystone: assignee Tom Cocozzello (tjcocozz) Lance Bragstad (lbragstad)
2015-09-03 17:07:23 OpenStack Infra keystone: status Triaged In Progress
2015-09-09 01:05:04 OpenStack Infra keystone: status In Progress Fix Committed
2015-09-09 03:27:46 Dolph Mathews tags fernet fernet kilo-backport-potential
2015-09-09 03:32:47 Dolph Mathews nominated for series keystone/kilo
2015-09-09 03:32:47 Dolph Mathews bug task added keystone/kilo
2015-09-09 03:32:56 Dolph Mathews tags fernet kilo-backport-potential fernet
2015-09-09 03:33:18 Dolph Mathews keystone/kilo: importance Undecided Medium
2015-09-09 14:29:59 OpenStack Infra keystone/kilo: status New In Progress
2015-09-09 14:29:59 OpenStack Infra keystone/kilo: assignee Lance Bragstad (lbragstad)
2015-09-09 15:00:45 Dolph Mathews keystone: status Fix Committed In Progress
2015-09-15 09:33:17 Dolph Mathews keystone: milestone liberty-rc1
2015-09-15 20:32:20 Morgan Fainberg keystone: milestone liberty-rc1
2015-09-16 04:26:06 OpenStack Infra keystone/kilo: assignee Lance Bragstad (lbragstad) Dolph Mathews (dolph)
2015-10-05 14:39:46 Steve Martinelli keystone: milestone liberty-rc2
2015-10-05 15:24:41 Lance Bragstad description In bug 1433372, we determined that we should percent encode Fernet tokens, because the padding characters (=) aren't considered URL safe by some RFCs. We also fail some tempest tests because clients sometimes decode or encode responses [0]. We should just remove the padding, that way clients don't have to worry about it. When we go to validate a token, we can determine what the padding is based on the length of the token: missing_padding = 4 - len(token) % 4 if missing_padding: token += b'=' * missing_padding [0] http://cdn.pasteraw.com/es3j52dpfgem4nom62e7vktk7g5u2j1 In bug 1433372, we determined that we should percent encode Fernet tokens, because the padding characters (=) aren't considered URL safe by some RFCs. We also fail some tempest tests because clients sometimes decode or encode responses [0]. We should just remove the padding, that way clients don't have to worry about it. When we go to validate a token, we can determine what the padding is based on the length of the token: missing_padding = 4 - len(token) % 4 if missing_padding:     token += b'=' * missing_padding A patch can be proposed to master, stable/liberty, and stable/kilo to ensure that Fernet tokens can be validated regardless of padding. This is important to consider when upgrading from Kilo to Liberty or Kilo to Mitaka. [0] http://cdn.pasteraw.com/es3j52dpfgem4nom62e7vktk7g5u2j1
2015-10-05 15:33:42 OpenStack Infra keystone/kilo: assignee Dolph Mathews (dolph) Lance Bragstad (lbragstad)
2015-10-06 01:48:40 OpenStack Infra keystone: status In Progress Fix Committed
2015-10-06 09:02:39 OpenStack Infra tags fernet fernet in-stable-liberty
2015-10-06 09:49:39 Thierry Carrez keystone: status Fix Committed Fix Released
2015-10-15 09:59:48 Thierry Carrez keystone: milestone liberty-rc2 8.0.0
2017-01-17 19:56:30 Morgan Fainberg keystone/kilo: status In Progress Won't Fix