Unable to get OAuth request token

Bug #1593120 reported by keerthivasan selvaraj
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Expired
Undecided
Unassigned

Bug Description

I am using keystone(Liberty), trying to use OAuth functionality inside keystone.

References:

https://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-oauth1-ext.html

I am following the above link for reference to use OAuth

Able to create consumer, while creating request_token i am getting invalid signature error.(unauthorized)

 == > /usr/lib/python2.7/site-packages/keystoneclient/v3/contrib/oauth1/request_tokens.py

After the Oauth sign, i got the header,endpoint as below,

headers:

{u'Authorization': u'OAuth oauth_nonce="16761963350708363801466058910", oauth_timestamp="1466058910", oauth_version="1.0", oauth_signature_method="HMAC-SHA1", oauth_consumer_key="7fc8945e648248e9a5694bee3a141ac0", oauth_callback="oob", oauth_signature="i4UDLi75qcTKu%2FClW7KNtIl1SI4%3D"', u'requested-project-id': u'7908bbde268348a9991ecdfa76fda577'}

endpoint:

'/OS-OAUTH1/request_token'

Error:

keystoneclient.exceptions.Unauthorized: Invalid signature (Disable debug mode to suppress these details.) (HTTP 401)

Tags: oauth support
Revision history for this message
keerthivasan selvaraj (keerthiv) wrote :
Revision history for this message
Steve Martinelli (stevemar) wrote :

I'm wondering if the unicode friendly version returned by keystoneauth is causing the signature to be calculated incorrectly. Can you run:

    req_token = keystone.oauth1.request_tokens.create(
        consumer_key=consumer.id,
        consumer_secret=consumer.secret,
        project='7908bbde268348a9991ecdfa76fda577')

and see what happens?

Revision history for this message
keerthivasan selvaraj (keerthiv) wrote :

Hi Steve,

Thanks for the response. I tried this way, but still same problem (Invalid signature ).

please help me in crossing this step.

Revision history for this message
keerthivasan selvaraj (keerthiv) wrote :

Hi Steve,

Any patches or feedbacks ??

Changed in keystone:
status: New → In Progress
Changed in keystone:
status: In Progress → Confirmed
tags: removed: federation keystone
tags: added: support
Changed in keystone:
status: Confirmed → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]

Changed in keystone:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.