commit 8ab4eb27be4c13c9bab2b3ea700f00a190521bf8
Author: Gage Hugo <email address hidden>
Date: Tue Oct 27 15:22:04 2020 -0500
Hide AccountLocked exception from end users
This change hides the AccountLocked exception from being returned
to the end user to hide sensitive information that a potential
malicious person could gain insight from.
The notification handler catches the AccountLocked exception as
before, but after sending the audit notification, it instead
bubbles up Unauthorized rather than AccountLocked.
Co-Authored-By: Samuel de Medeiros Queiroz <email address hidden>
Change-Id: Id51241989b22c52810391f3e8e1cadbf8613d873
Related-Bug: #1688137
(cherry picked from commit ac2631ae33445877094cdae796fbcdce8833a626)
Reviewed: https:/ /review. opendev. org/c/openstack /keystone/ +/790443 /opendev. org/openstack/ keystone/ commit/ 8ab4eb27be4c13c 9bab2b3ea700f00 a190521bf8
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/ussuri
commit 8ab4eb27be4c13c 9bab2b3ea700f00 a190521bf8
Author: Gage Hugo <email address hidden>
Date: Tue Oct 27 15:22:04 2020 -0500
Hide AccountLocked exception from end users
This change hides the AccountLocked exception from being returned
to the end user to hide sensitive information that a potential
malicious person could gain insight from.
The notification handler catches the AccountLocked exception as
before, but after sending the audit notification, it instead
bubbles up Unauthorized rather than AccountLocked.
Co-Authored-By: Samuel de Medeiros Queiroz <email address hidden>
Change-Id: Id51241989b22c5 2810391f3e8e1ca dbf8613d873 7094cdae796fbcd ce8833a626)
Related-Bug: #1688137
(cherry picked from commit ac2631ae3344587