commit 0f3f08c3df0dd6c32e685dae6726e945b01ea8c7
Author: Morgan Fainberg <email address hidden>
Date: Thu Jan 12 15:19:48 2017 -0800
Force use of AuthContext object in .authentcate()
Force the keystone.auth.controllers.Auth.authenticate method to
require the use of an AuthContext object instead of something
duck-typed (dictionary). This is done to ensure the security and
integrity of IDENTITY_KEYS are covered and values are not changed
by a plugin due to the security built into AuthContext being
circumvented since it was not used. This is not pythonic, this
is being done for hardening purposes.
Reviewed: https:/ /review. openstack. org/419693 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=0f3f08c3df0 dd6c32e685dae67 26e945b01ea8c7
Committed: https:/
Submitter: Jenkins
Branch: master
commit 0f3f08c3df0dd6c 32e685dae6726e9 45b01ea8c7
Author: Morgan Fainberg <email address hidden>
Date: Thu Jan 12 15:19:48 2017 -0800
Force use of AuthContext object in .authentcate()
Force the keystone. auth.controller s.Auth. authenticate method to
require the use of an AuthContext object instead of something
duck-typed (dictionary). This is done to ensure the security and
integrity of IDENTITY_KEYS are covered and values are not changed
by a plugin due to the security built into AuthContext being
circumvented since it was not used. This is not pythonic, this
is being done for hardening purposes.
Change-Id: I013846af59587d 17b15ca4cf546e6 372231f576e
Closes-Bug: #1656076