flaskification

[Morgan Fainberg]

Moving keystone to Flask away from it's home-grown WSGI framework is a long-term plan. The major reasons for this is to ensure we have an easy way for folks start contributing.

This will include a number of improvements including:

* moving to flask-restful for API definitions

* all routable paths will be owned by the base prefix (e.g. keystone.api.user will own everything under /user/)

* Paste Deploy removed

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/574953

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/574735
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=f18d54fe16dcc91a0d9d144ad15c524a679e3cc5
Submitter: Zuul
Branch: master

commit f18d54fe16dcc91a0d9d144ad15c524a679e3cc5
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 12 06:59:38 2018 -0700

    Store JSON Home Resources off the composing router

    JSON Home Resources must be stored in a location other
    than the router for Flask as we are not composing routers
    in the same way as we used to with the home-grown webob
    based WSGI setup.

    Partial-Bug: #1776504
    Closes-Bug: #1776506
    Change-Id: I292ea9e923ff2f49041dfd417994bcdd797d0520

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/576637

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/576639

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/574953

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/578189

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/578190

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/578216

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/574414
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8dd2235cbc08f11036a898342e00bc2a5f13f79d
Submitter: Zuul
Branch: master

commit 8dd2235cbc08f11036a898342e00bc2a5f13f79d
Author: Morgan Fainberg <email address hidden>
Date: Mon Jun 11 09:49:05 2018 -0700

    Add Flask-RESTful and update flask minimum(s)

    Keystone's move to flask requires more than the general Flask library
    as Keystone is a RESTful (ish) API. We will be using Flask-RESTful for
    the easier mechanism to implment a REST API than standard flask
    blueprints.

    This also increases the base flask minimum requirements to unblock
    requirements updates (flask has been updated in g-r to minimum of
    1.0.2)

    Partial-Bug: #1776504
    Change-Id: I398acad439f4e525df3ca4e17fdd3e3ba90d58cc

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/574502
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ecf721a3c176daf67d00536c48e80e78bded1af6
Submitter: Zuul
Branch: master

commit ecf721a3c176daf67d00536c48e80e78bded1af6
Author: Morgan Fainberg <email address hidden>
Date: Mon Jun 11 17:25:45 2018 -0700

    Keystone adheres to public_endpoint opt only

    With the complete removal of the v2.0 API, keystone no longer
    differentiates between admin and public endpoints. This change
    deprecates the "admin_endpoint" configuration option and converts
    keystone over to only using the public endpoint. The "admin" endpoint
    was only used for unit testing purposes.

    This change does not clean up all code related, it is aimed to make
    the most minimal set of changes eliminating the use of the
    "admin_endpoint" configuration option.

    Partial-Bug: #1776504
    Change-Id: I08f6f8ae078d65203bd95c43c80367dd3489be48

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/579342

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/579746

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/579928

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/579930

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/579985

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/574736
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=3e3ba18bfaf82711689a45ae03efdba78e6e856e
Submitter: Zuul
Branch: master

commit 3e3ba18bfaf82711689a45ae03efdba78e6e856e
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 12 06:42:21 2018 -0700

    Convert json_home and version discovery to Flask

    Move the JSON Home Document and Version Discovery Documents out of
    the webob-based mapper and into Flask.

    This change removes the keystone.version.controller and
    keystone.version.router modules as they have been moved into
    keystone.api.discovery.

    The keystone.api.discovery module is somewhat specialized as there
    are no "resources" and it must handle multiple types of responses
    based upon the ACCEPTS header (JSON Home or JSON). In lieu of the
    flask-RESTful mechanisms, keystone.api.discovery utilizes bare
    flask blueprint and functions. Minor scaffolding work has been done
    to ensure the discovery blueprint can be loaded via the loader loop
    in keystone.server.flask.application (a stub object in
    keystone.api.discovery).

    Partial-Bug: #1776504
    Change-Id: Ib25380cefdbb7147661bb9853de7872a837322e0

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/576637
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=3330c228ad030e6d3d987f1f360ba5ce0c460333
Submitter: Zuul
Branch: master

commit 3330c228ad030e6d3d987f1f360ba5ce0c460333
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 19 12:55:24 2018 -0700

    Add support for before and after request functions

    In flask it is possible to register functions that will run before
    and after every request, these are useful for ensuring certain
    things occur (setting up environments) and protecting against
    cases such as un-enforced API calls not explicitly white-listed.

    Partial-Bug: #1776504
    Change-Id: I0138a4676c1e257cd0c238bbe11a520446c299cb

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/577587
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1e870abd693088d19db023d731310a1f33f2c831
Submitter: Zuul
Branch: master

commit 1e870abd693088d19db023d731310a1f33f2c831
Author: Morgan Fainberg <email address hidden>
Date: Fri Jun 22 17:27:36 2018 -0700

    Don't replace the whole app just the wsgi_app backing

    Do not replace the entire app when wrapping with middleware. It is
    important to maintain all the flask-functionality on the app object
    and ensure any/all test client calls go through the entire stack of
    app and middleware.

    Partial-Bug: #1776504
    Change-Id: I928d08e96b4c79807ad8c312ba17359c54b67fa0

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/577627
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1bcc8a11c8f3fba70cdc4b8c6992b20a423aba48
Submitter: Zuul
Branch: master

commit 1bcc8a11c8f3fba70cdc4b8c6992b20a423aba48
Author: Morgan Fainberg <email address hidden>
Date: Sat Jun 23 14:33:24 2018 -0700

    Make it easy to identify a 404 from Flask

    This change makes (for test purposes) the Flask app return a 418
    instead of a 404 if the path is unrouted. This allows easy
    identification (programmatically) if the 404 is issued from Flask
    or is a handled 404 such as "UserNotFound"

    Parital-Bug: #1776504
    Change-Id: I0475d9b6315250d9c3384be63c14a81fbd1c7b7c

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/578216
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=b77b5845d58b64babd9111832e239f47fc4766a2
Submitter: Zuul
Branch: master

commit b77b5845d58b64babd9111832e239f47fc4766a2
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 26 14:46:01 2018 -0700

    Address minor comments to 404 error detection

    Addressing minor comments to the 404 detection mechanism.

    Change-Id: Id8e2b5d5f811495694965d75a32eebb2a59779f2
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/582449

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/582450

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/576639
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=bb3b15bbf02993545d234d827dbb72ca24695e8d
Submitter: Zuul
Branch: master

commit bb3b15bbf02993545d234d827dbb72ca24695e8d
Author: Morgan Fainberg <email address hidden>
Date: Sat Jun 23 14:33:50 2018 -0700

    Implement base for new RBAC Enforcer

    Create the base implementation of the RBAC enforcer with compat code
    for the legacy mechanism via @protected decorators.

    Change-Id: I80662d9b23e706b720d56670cb849318e951a3b4
    Parital-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/578189
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=fb0299f661f590bcaddcb3d363fbec4ea6df7548
Submitter: Zuul
Branch: master

commit fb0299f661f590bcaddcb3d363fbec4ea6df7548
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 26 10:26:20 2018 -0700

    Add support for enforce_call to set value on flask.g

    When enforce_call is called, flask.g has the appropriate value set
    in the known attribute location so that it can be determined if
    enforce_call was used within a REST API request.

    Change-Id: I08ecd2be0a80248df7041596437adb6238835153
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/579746
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1caba2a44858ab4a6d405603cd357bb1c5e51a77
Submitter: Zuul
Branch: master

commit 1caba2a44858ab4a6d405603cd357bb1c5e51a77
Author: Morgan Fainberg <email address hidden>
Date: Sun Jul 1 10:26:15 2018 -0700

    Move keystone.server.common to keystone.server

    The common functions are mostly removed and these make sense to
    be part of the __init__.py. This also simplifies imports and
    eliminates odd import errors due to duplicated names and masking
    the names e.g. (and keystone.server.flask needs the functions
    from keystone.server.common):

    keystone.server.flask.common
    keystone.server.common

    Change-Id: Ie586fd45e10c8a1c8db3d9a64f949c97004814d9
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/579342
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=6d1456061defc016529b3c7c89edb7618b117267
Submitter: Zuul
Branch: master

commit 6d1456061defc016529b3c7c89edb7618b117267
Author: Morgan Fainberg <email address hidden>
Date: Sat Jun 30 08:17:33 2018 -0700

    Address minor comments from initial impl RBACEnforcer

    RBACEnforcer had a couple minor comments and this addresses all
    except for adding explicit system-scope enforcement tests.

    * Invalid "action" (policy rule name) now correctly raises
      Forbidden instead of Unauthorized (it can never be authorized
      as the code is incorrect, and a 500 "ISE" should never be expected).
      This is equivalent behavior to an unknown rule in the oslo.policy
      enforcer.

    * Added more expressive errors/warnings/exceptions for invalid actions.

    * Code comments added where missing

    Change-Id: I4895242555d2e9761e035d879ca2dfeb6d9b387c
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/582724

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/582725

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/582726

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/578190
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=16be22b428fd0c7c34dd48417878f7d37ad1e2ac
Submitter: Zuul
Branch: master

commit 16be22b428fd0c7c34dd48417878f7d37ad1e2ac
Author: Morgan Fainberg <email address hidden>
Date: Tue Jun 26 13:02:01 2018 -0700

    Flesh out and add testing for flask_RESTful scaffolding

    Add in support for JSON Home documents, a ResourceBase implementing
    basic functionality, and full testing of the new flask_RESTful
    scaffolding.

    Change-Id: I5bcc8660b68c0b39a2110089f6c67531769d14ef
    Parital-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/579928
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=9387dfd4cc39fa6fbbf66147ced880dffa6408bd
Submitter: Zuul
Branch: master

commit 9387dfd4cc39fa6fbbf66147ced880dffa6408bd
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 3 10:10:53 2018 -0700

    Make keystone.server.flask more interesting for importing

    Importing keystone.server.flask now exposes all the relevant bits
    from the sub modules to develop APIs without needing to understand
    all the underlying modules. __all__ has also be setup in a meaningful
    way to allow for `from keystone.server.flask import *` and have
    all the needed objects to start developing APIs for keystone.

    Change-Id: Iab22cabb71c6690e6ffb0c9de68ed8437c4848de
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/579930
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=0f4fd2e4f38d4e5e6aea5dfd7c3d124e8965edb0
Submitter: Zuul
Branch: master

commit 0f4fd2e4f38d4e5e6aea5dfd7c3d124e8965edb0
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 3 10:12:40 2018 -0700

    Fix keystone.common.rbac_enforcer.__init__.py exporting

    keystone.common.rbac_enforcer now exports (and has __all__ setup)
    for the RBACEnforcer object. This limits the underlying module
    knowledge needed to effectively work with the new flask RBACEnforcer.

    Change-Id: I48cafa779ca1895113222a2ebfef6d738a906473
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/579985
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=dbc2ac06b8236c446a4bb2817add4f253bf2034d
Submitter: Zuul
Branch: master

commit dbc2ac06b8236c446a4bb2817add4f253bf2034d
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 3 13:54:40 2018 -0700

    Do not use flask.g imported as g

    Always explicitly use flask.g as `flask.g` and do not do `from flask
    import g`.

    Change-Id: I3737115717d8a5040c3e299d206fbddd43b33aa6
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583278

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583356

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583357

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583358

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583373

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/583374

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/582449
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=0d6b427fcc7f6b9b2a06bdd9a7af37064e7ddd51
Submitter: Zuul
Branch: master

commit 0d6b427fcc7f6b9b2a06bdd9a7af37064e7ddd51
Author: Morgan Fainberg <email address hidden>
Date: Thu Jul 12 16:41:10 2018 -0700

    Don't allow legacy and native flask to share paths

    When a path-prefix is moved to flask native dispatching, no longer
    allow that path prefix to be registered with the legacy dispatch
    middleware. This will ensure the entire Keystone path is moved
    and prevent bad behavior due to both dispatchers needing ot handle
    a URL.

    Change-Id: Ice800abf80a725349d6450b742a2c48238e11e6e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584041

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584211

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/582724
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=dbc6899c38f972193fc16feb9d6543f27678cbe0
Submitter: Zuul
Branch: master

commit dbc6899c38f972193fc16feb9d6543f27678cbe0
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 13 20:32:29 2018 -0400

    Properly remove content-type on HTTP 204

    With a HTTP 204, we have no content, therefore no content type.

    Change-Id: I39d36876d2ec37f6c34605bea48cdf7e20461c6e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/582725
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ba854a5acd3938e13824da8ac5a439eb2a14b71b
Submitter: Zuul
Branch: master

commit ba854a5acd3938e13824da8ac5a439eb2a14b71b
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 13 20:34:19 2018 -0400

    Add correct self-link

    The self-link was missing the resource id, properly add the id to
    the self-link now.

    Change-Id: I82c59fc3a02e4182147ec8090d54cfe82b8d0c61
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/582450
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=cb130ffae86dcec0c7a61502005c7b3b483d3579
Submitter: Zuul
Branch: master

commit cb130ffae86dcec0c7a61502005c7b3b483d3579
Author: Morgan Fainberg <email address hidden>
Date: Thu Jul 12 19:07:00 2018 -0700

    Move Credentials API to Flask Native

    Move the Credentials API to Flask Native dispatching.

    This change fixes some circular importing in the
    conversion.

    Change-Id: I5e2485ba471d09c3454e78ca2c9dfa19aaf0e4e2
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/582726
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=c008cbcea05e6166ba3137e97a0f3d93b709637a
Submitter: Zuul
Branch: master

commit c008cbcea05e6166ba3137e97a0f3d93b709637a
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 13 20:48:35 2018 -0400

    Allow class-level definition of API URL Prefix

    Add the ability to define API URL Prefix at the class-level. This
    will be used only if no ap_url_prefix is passed into __init__.

    Flask-restful handles prefixes in the order of `BAE` as used in Keystone:
      * Blueprint
      * API
      * Endpoint (flask-endpoint)

    This allows for additional prefixes such as "OS-TRUST" for
    legacy/converted extension code that has not been updated to use
    non-"OS" prefixed pathes.

    Change-Id: I7acf2f16a25efc6a801e6c87c1aac436bb8e5453
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584451

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584466

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584485

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/584529

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583356
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=5ea59f52208e124c3a94a71e68bf464a4f5e1600
Submitter: Zuul
Branch: master

commit 5ea59f52208e124c3a94a71e68bf464a4f5e1600
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:30:55 2018 -0700

    Correctly pull input data for enforcement

    Pull the actual input data into the enforcement target dict instead
    of the view_args (the view args are something like 'trust_id', the
    input data would be user-supplied json).

    Change-Id: I9d7b1117d4decfd31647d6418f02302917ca1cbd
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/584451
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=f60c661d2ceab7910e0e0bdcdf6846ec01bc9d80
Submitter: Zuul
Branch: master

commit f60c661d2ceab7910e0e0bdcdf6846ec01bc9d80
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 20 17:25:24 2018 +0000

    Fix RBACEnforcer Comment

    Fix the comment that is now inaccurate.

    Change-Id: I38eeffa028f33870ca7619c4f76644e1c41f812e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583373
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ed5e88c5b6d3b4af9215b11b66198ae5b0afdf03
Submitter: Zuul
Branch: master

commit ed5e88c5b6d3b4af9215b11b66198ae5b0afdf03
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:58:37 2018 -0700

    Use oslo_serialization.jsonutils

    Keystone's objects have a number of data types that do not serialize
    cleanly with the defualt stdlib json library. This change makes
    Keystone utilize oslo_serialization.jsonutils instead with flask
    restful.

    Change-Id: I6c070b5e7bb231fca47f10bfaaa989072d2dd092
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583374
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1e7f3a1ad1e9d6741ecaeeeec5205deb5d1bae2d
Submitter: Zuul
Branch: master

commit 1e7f3a1ad1e9d6741ecaeeeec5205deb5d1bae2d
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:33:07 2018 -0700

    Add pycadf initiator for flask resource

    Add a pycadf initiator property for the flask resource
    base. This allows for generation of a proper initiator
    where needed in Keystone APIs.

    Change-Id: Iaa3dd134cc2feb39918015b5d2d8891e47362dce
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/585519

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583357
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=d35a5edcab21db4a9cbd9c4b00349d38920a5146
Submitter: Zuul
Branch: master

commit d35a5edcab21db4a9cbd9c4b00349d38920a5146
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:33:07 2018 -0700

    Allow for 'extension' rel in json home

    Allow providing an alternative REL function (e.g. for extensions)
    in JSON Home in flask. The alternative functions are expected to
    be functools.partial.

    The extension-mode should only ever be used in the case of a keystone
    API that was an extension (legacy style) and has not been converted
    over to a new URI path; typically extensions start with an OS- prefix
    in the URL.

    All new APIs should not be using the 'extension' style.

    Change-Id: I3970aef12f3b7c8e84fa80dfea8fc6eda63fe77d
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583358
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=68aa33a0c1faf303f0aac41f93ba6c61b2fbbc4b
Submitter: Zuul
Branch: master

commit 68aa33a0c1faf303f0aac41f93ba6c61b2fbbc4b
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:37:36 2018 -0700

    Trusts do not implement patch.

    We do not actually implement patch. This is not part of our API and
    this isn't testing anything specifically relevant. In Flask this
    is 405. This is not an API contract break, as being unimplemneted
    it is the responsibility of the underlying server to handle the
    request.

    Change-Id: I42975afa71ea083653bcbe582879b5c3c0dfb3ef
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/585869

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/586306

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/583278
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=3e948cfab4398c9092d0f738e15fa639ba248135
Submitter: Zuul
Branch: master

commit 3e948cfab4398c9092d0f738e15fa639ba248135
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 17 13:38:21 2018 -0700

    Move trusts to flask native dispatching

    Migrate trust APIs from legacy routes/webob to flask native
    dispatching.

    Change-Id: I6cba774c7dcf2fc6fdcbdc8f6e80111ccd8036a1
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/584211
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=6e74c6eab303cdae9f5fbb2baf55306c174826bb
Submitter: Zuul
Branch: master

commit 6e74c6eab303cdae9f5fbb2baf55306c174826bb
Author: Morgan Fainberg <email address hidden>
Date: Thu Jul 19 20:25:06 2018 -0700

    Implement "no-update" test for trusts

    Trusts explicitly do not implement "patch" or "put". We now explicitly
    test for a 405 (Method Not Allowed), as updates are outside of the
    Keystone API, in an isolated test.

    Change-Id: I9b84732506f85df7ad820e3d1f2a0e3408ed071b
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/584466
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1c5affbddb0f3f6b6e8b8a37c75218edec877976
Submitter: Zuul
Branch: master

commit 1c5affbddb0f3f6b6e8b8a37c75218edec877976
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 20 11:22:21 2018 -0700

    Boostrap CLI tests no longer call auth controller

    Ensure the CLI tests no longer directly call the auth controller.
    If it is desireable to call a controller method, make sure it is
    done through the complete WSGI stack. This ensures no test changes
    are needed when moving `/auth` to flask (test changes are isolated)

    Change-Id: Id4f795d2e479115dc7762d9c6e2fe3ee817a7b84
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/587647

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/588064

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/584485
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=f5c9b094af8442219e75265a87551873e058003b
Submitter: Zuul
Branch: master

commit f5c9b094af8442219e75265a87551873e058003b
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 20 11:37:01 2018 -0700

    Move validate_issue_token_auth from controllers

    For the move to flask, and to ensure there are no test changes,
    this changeset moves `validate_issue_token_auth` from controllers to
    the auth.schema module (as it is clearly about validation).

    Change-Id: I97e07cbebb4e97df4b38899037e97ce3f34b9e03
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/588080

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/584529
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=6dbd0058421feb9311571b4a921831a7b35bdc72
Submitter: Zuul
Branch: master

commit 6dbd0058421feb9311571b4a921831a7b35bdc72
Author: Morgan Fainberg <email address hidden>
Date: Fri Jul 20 14:51:01 2018 -0700

    Remove direct calls to auth.controllers in some tests

    Tests in keystone.tests.unit.test_v3 and kestone.tests.unit.test_v3_auth
    no longer directly instantiate or calls to the auth controllers. The
    only exception are test classes that are not used, those have had a
    TODO note added to them. This is being done for the conversion to flask
    where the auth controllers will no longer exist. All test changes are
    done outside of the conversion of webob controller -> flask restful
    api.

    Change-Id: Ib668ca18faf42b41bc63558c6634fca96224d195
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/585869
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=da4eb43f5c74ffc18af3664545c95476c5123d5c
Submitter: Zuul
Branch: master

commit da4eb43f5c74ffc18af3664545c95476c5123d5c
Author: Morgan Fainberg <email address hidden>
Date: Thu Jul 19 11:46:13 2018 -0700

    Move unenforced_api decorator to module function

    Move the unenforced_api decorator off the APIBase object and into
    the module. It is likely the code would require calling the decorator
    from the module level anyway since the Resource is added to a list
    that is a property of the API. Moving the decorator makes it so the
    call is more akin to @keystone_flask.unenforced_api instead of
    @keystone_flask.APIBase.unenforced_api.

    Change-Id: Ic1d5466bc26c76886333f00b6962886fd2ce32fd
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/587647
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=a4d9a4f13b21fbdd8feacd07085c77602b4123d9
Submitter: Zuul
Branch: master

commit a4d9a4f13b21fbdd8feacd07085c77602b4123d9
Author: Morgan Fainberg <email address hidden>
Date: Tue Jul 31 15:05:15 2018 -0700

    Convert OS-REVOKE to flask dispatching

    Convert OS-REVOKE to flask dispatching.

    Change-Id: I2504d4326b8c35fd6d9a0d929afc7e658e9c14f9
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589274

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589282

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589288

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589546

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589640

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589641

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589642

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/588064
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=6f07b4c1ff69c49d8b0f8411896d12aa893b3abb
Submitter: Zuul
Branch: master

commit 6f07b4c1ff69c49d8b0f8411896d12aa893b3abb
Author: Morgan Fainberg <email address hidden>
Date: Wed Aug 1 11:47:33 2018 -0700

    Convert OS-AUTH1 paths to flask dispatching

    Convert OS-AUTH1 paths to native flask dispatching.

    Change-Id: Iad54005b4dbfafa52ac241cdc4d1cae63c99f151
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/589950

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/588080
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=3bad4cdbb78f88c29bc492d4526101e723e19039
Submitter: Zuul
Branch: master

commit 3bad4cdbb78f88c29bc492d4526101e723e19039
Author: Morgan Fainberg <email address hidden>
Date: Wed Aug 1 14:15:24 2018 -0700

    Convert limits and registered limits to flask dispatching

    Convert limits and registered limits to flask native dispatching.

    NOTE: A minor test change was needed. The limit JSON Home data
          was incorrectly formatted and did not properly isolate the
          singular forms of "limit" and "registered_limit" from the
          plural (list) APIs.

    Change-Id: Ib3ceeb0a249ccc73c143730fac78d9f54c67174e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590494

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590495

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/590495
Reason: Duplicate.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590502

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590518

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590588

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/590590

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/591025

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/591082

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/591146

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/591147

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589274
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8eaf0854ff81b8c3127eea5fcb0085a6e8745fda
Submitter: Zuul
Branch: master

commit 8eaf0854ff81b8c3127eea5fcb0085a6e8745fda
Author: Morgan Fainberg <email address hidden>
Date: Mon Aug 6 10:45:39 2018 -0700

    Migrate OS-EP-FILTER to flask native dispatching

    Migrate the OS-EP-FILTER API to flask-native dispatching. This does
    not migrate the standard catalog "region", "service" or "endpoint"
    APIs.

    Change-Id: Ia7c2ab211e2f7fb136e5817390751121f97f4340
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589282
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=637990bf71a631a6b79c04575db2d53245f1b9be
Submitter: Zuul
Branch: master

commit 637990bf71a631a6b79c04575db2d53245f1b9be
Author: Morgan Fainberg <email address hidden>
Date: Mon Aug 6 13:40:13 2018 -0700

    Convert OS-SIMPLE-CERT to flask dispatching

    Convert OS-SIMPLE-CERT to flask native dispatching.

    Change-Id: I7b58c50f1ef870c5966645045efdde2e6c9fd34d
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589546
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=13897ef69b6ebecc2af203d10f23c25c7e5a3e67
Submitter: Zuul
Branch: master

commit 13897ef69b6ebecc2af203d10f23c25c7e5a3e67
Author: Morgan Fainberg <email address hidden>
Date: Tue Aug 7 09:41:13 2018 -0700

    Pass path into full_url and base_url

    This change mirrors what was done prior to flask and leans on the
    base_url and full_url functions to append '/v3' and the path or
    collection_name. This will allow for changes to wrap_member and
    wrap_collection to properly handle local-only wrapping (no need
    to cross-api call wrap because a "role" is returned from the "trust"
    api).

    Change-Id: I5376d8abc581994f28da64f3b578a04b00e68c4d
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589288
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=72b59b0ccbf72b9e263929e70e56f0a1221427b4
Submitter: Zuul
Branch: master

commit 72b59b0ccbf72b9e263929e70e56f0a1221427b4
Author: Morgan Fainberg <email address hidden>
Date: Tue Aug 7 10:50:37 2018 -0700

    Allow wrap_member and wrap_collection to specify target

    Allowing targeting of the types for wrap_member and wrap_collection.
    This prevents the need to cross-call controllers such as wrapping role
    refs fro the trust api.

    Change-Id: Id8658cf6fba2fb765ec0f9b2265367741470f50e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589640
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=84c074f28c60ca9aed7830b35914b1f8ed0a67f8
Submitter: Zuul
Branch: master

commit 84c074f28c60ca9aed7830b35914b1f8ed0a67f8
Author: Morgan Fainberg <email address hidden>
Date: Tue Aug 7 13:35:48 2018 -0700

    Convert regions API to flask native dispatching

    Convert regions API to flask native dispatching.

    Change-Id: Ic38065441adb33f1f0550a6ae4cb1bd94ff2e079
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589641
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=18c6e838b95992b7bf49db80815fb5b58cb98c7c
Submitter: Zuul
Branch: master

commit 18c6e838b95992b7bf49db80815fb5b58cb98c7c
Author: Morgan Fainberg <email address hidden>
Date: Tue Aug 7 13:52:48 2018 -0700

    Convert services api to flask native dispatching

    Convert the services api to flask native dispatching.

    Change-Id: Ibdecc157e1f540bbd2b0378283ec09f5677798f0
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589642
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=56d9c30f8f64c790111fe9c877a5d344c9d75790
Submitter: Zuul
Branch: master

commit 56d9c30f8f64c790111fe9c877a5d344c9d75790
Author: Morgan Fainberg <email address hidden>
Date: Tue Aug 7 14:13:43 2018 -0700

    Convert endpoints api to flask native dispatching

    Convert endpoints api to flask native dispatching.

    Change-Id: I684e6117dc7fdd535f2ae530d44e6d5088624793
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/590494
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=cfc5a730b75bff0b6b364c86033a718f242ed152
Submitter: Zuul
Branch: master

commit cfc5a730b75bff0b6b364c86033a718f242ed152
Author: Morgan Fainberg <email address hidden>
Date: Wed Aug 8 13:12:22 2018 -0700

    Convert Roles API to flask native dispatching

    Convert Roles and Implied Roles (all paths under /v3/roles) to
    flask native dispatching. This change does not convert
    /v3/role_inferences to flask native dispatching.

    Change-Id: I114380e96c6a2b3c167676fa1525e4470560b541
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/590502
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=0f5300ddb3a7ac4dd5481df7b74c44e788a97c4d
Submitter: Zuul
Branch: master

commit 0f5300ddb3a7ac4dd5481df7b74c44e788a97c4d
Author: Morgan Fainberg <email address hidden>
Date: Thu Aug 9 12:59:10 2018 -0700

    Convert role_inferences API to flask native dispatching

    Convert /v3/role_inferences API to flask native dispatching.

    Change-Id: I4a2719f27bb31437cbb0dea9f1379c9b3542c393
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/590590
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=4ec63548c24eb7063a841df1fe56f383042f578f
Submitter: Zuul
Branch: master

commit 4ec63548c24eb7063a841df1fe56f383042f578f
Author: Morgan Fainberg <email address hidden>
Date: Thu Aug 9 17:33:50 2018 -0700

    Add callback action back in

    Add the callback action to delete endpoint group association by project
    that was dropped in the conversion of OS-EP-FILTER to flask.

    Change-Id: Id16f18f6bac9b232564bc7643f282a8ca2bd7080
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/590518
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=665d5beda7e52916f4c97f26f63bce698dabdc28
Submitter: Zuul
Branch: master

commit 665d5beda7e52916f4c97f26f63bce698dabdc28
Author: Morgan Fainberg <email address hidden>
Date: Thu Aug 9 14:24:00 2018 -0700

    Convert role_assignments API to flask native dispatching

    Convert the role_assignments API to flask native dispatching.

    Change-Id: I77f64f025d8dbc42e829bae626aace7deb2e7c6e
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/590588
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=180f2ce5e640d1035fbd6c6c0ffad971189b04f4
Submitter: Zuul
Branch: master

commit 180f2ce5e640d1035fbd6c6c0ffad971189b04f4
Author: Morgan Fainberg <email address hidden>
Date: Thu Aug 9 17:28:54 2018 -0700

    Convert system (role) api to flask native dispatching

    Convert the /system API (used for granting roles to the system scope) to
    Flask native dispatching.

    Change-Id: I48b04f2d0e9d858b0c709687beee27227e516843
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/591025
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=41f23eed512f3629dc38246adbbfc7bae3a912d2
Submitter: Zuul
Branch: master

commit 41f23eed512f3629dc38246adbbfc7bae3a912d2
Author: Morgan Fainberg <email address hidden>
Date: Fri Aug 10 10:49:30 2018 -0700

    Move json_home "extension" rel functions

    Move the json_home "extension" rel functiond to a common location
    so that they may be shared as needed between apis. Since there
    are no new extensions for keystone, once keystone is moved to being
    100% flask dispatched, no new relation functions will need to be
    added to keystone.api._shared.json_home_relations.

    Change-Id: I7040526acccee63183559b5b817b3e33990ab508
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/589950
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=87a39635eb047aba6830b3bcac5d06266fae4812
Submitter: Zuul
Branch: master

commit 87a39635eb047aba6830b3bcac5d06266fae4812
Author: Lance Bragstad <email address hidden>
Date: Wed Aug 8 15:52:46 2018 +0000

    Convert policy API to flask

    Migrate the policy APIs to use flask-native dispatching.

    Change-Id: I03fc72b19e85df711b213c1fe47b30b3f9f91d6c
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/601875

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/601881

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/601882

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/602137

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/602189

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/585519

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/586306

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/591082
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=94f8f103abc6911144423c277fbd1a71d691aa99
Submitter: Zuul
Branch: master

commit 94f8f103abc6911144423c277fbd1a71d691aa99
Author: Morgan Fainberg <email address hidden>
Date: Fri Aug 10 13:41:52 2018 -0700

    Convert OS-FEDERATION to flask native dispatching

    Convert OS-FEDERATION to flask native dispatching.

    NOTE: Two changes occured that impact testing in this patch.
          * The JSON Home test now uses assertDictEquals to make it
            easier to debug json_home document errors

          * It was by general good luck that the overloaded relation
            'identity_providers' worked as expected. The relation was
            used for both '/OS-FEDERATION/identity_providers' and
            the Identity-Provider-Specific WebSSO path. The change
            to the JSON Home document and the tests make the
            Identity-Provider-Specific WebSSO path now a relation
            of 'identity_providers_websso' to more closely align
            with 'websso' relation for
            '/auth/OS-FEDERATION/websso/{protocol_id}'. While
            this constitutes a minor break in our contract (the
            output of the json home document) it was required to
            ensure consistency and functionality. The alternative
            is to not represent '/OS-FEDERATION/identity_providers'
            (list endpoint) in the JSON Home document at all, instead
            represent only the WebSSO endpoint.

    Change-Id: If746c14491322d4a5f88fa0cbb31105f6d38c240
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/602137
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8696865b13667feddd3859fe5e4e84440b9e114e
Submitter: Zuul
Branch: master

commit 8696865b13667feddd3859fe5e4e84440b9e114e
Author: morgan fainberg <email address hidden>
Date: Wed Sep 12 11:39:46 2018 -0700

    Address issues with flask conversion of os-federation

    This change addresses the following issues with the flask conversion:

    * Filter attributes on get_idp (added to wrap_member)

    Change-Id: I028f894845d1d6553c6372cd67b53102b10b8a4c
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/602189

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/591146
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=22f5f7303f9e366cfe1a2f0b2a8a7bd20b084624
Submitter: Zuul
Branch: master

commit 22f5f7303f9e366cfe1a2f0b2a8a7bd20b084624
Author: Morgan Fainberg <email address hidden>
Date: Sat Aug 11 05:17:22 2018 -0700

    Fix RBACEnforcer get_member_from_driver mechanism

    Correct an issue with the RBACEnforcer requiring 'member_name' instead
    of 'member_key' for the inferred lookup. Due to how flask works and that
    all views are instantiated on demand (and not accessible outside of
    the active method without a lot of extra introspection), the provider
    object now supports a "deferred" lookup mechanism. This mechanism
    leverages the descriptor construct and does the lookup of the provider
    api property and method at runtime. This, in essence, works like a
    "@classproperty" would.

    Change-Id: I264384dd521ea60ba6ee98652aaeb939f1a75521
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/591147
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=2a04d78dbfe7f52c49e3d12489cf1381dd9a05af
Submitter: Zuul
Branch: master

commit 2a04d78dbfe7f52c49e3d12489cf1381dd9a05af
Author: Morgan Fainberg <email address hidden>
Date: Fri Aug 10 20:05:14 2018 -0700

    Convert groups API to flask native dispatching

    Convert the groups API to flask native dispatching.

    Change-Id: I2c15d4eba13309e05258c9ed7ddc452859e5cb70
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/591165
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8c397fa727c8438c1848bc77b3737768716468da
Submitter: Zuul
Branch: master

commit 8c397fa727c8438c1848bc77b3737768716468da
Author: Morgan Fainberg <email address hidden>
Date: Sat Aug 11 11:29:59 2018 -0700

    Convert OS-INHERIT API to flask native dispatching

    Convert OS-INHERIT API to flask native dispatching.

    NOTE: A minor test change was needed, the test was mis-constructing the
    URI with multiple slashes. The test now properly constructs the URI
    using an lstrip when combining the direct_url bits.

    Change-Id: I0907eb00cdfb9849342220f9b528f94175e71545
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/601875
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=4975b79e8174587f7639347939cf679460d4896b
Submitter: Zuul
Branch: master

commit 4975b79e8174587f7639347939cf679460d4896b
Author: morgan fainberg <email address hidden>
Date: Tue Sep 11 16:03:54 2018 -0700

    Ensure view args is in policy dict

    The policy_dict (in enforcement) was not populating the view args
    in a similar manner to the old style @protected decorator. This
    change ensures that we mirror the old behavior (required for
    proper use of v3cloud policy).

    Change-Id: Ida9009a95a874be9cc60c3152d4e3225726562eb
    Partial-Bug: #1776504
    Closes-Bug: #1792047

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/597350
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=296f20f0a7e26784b6414ddbe12e0218087a9f51
Submitter: Zuul
Branch: master

commit 296f20f0a7e26784b6414ddbe12e0218087a9f51
Author: Gage Hugo <email address hidden>
Date: Tue Aug 28 20:35:50 2018 -0500

    Convert domains api to flask

    Convert domains api to flask native dispatching.

    Change-Id: I974ab112986e6c242a139f7d7dc14fd54a48ee42
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/603451

[OpenStack Infra (hudson-openstack)]

Change abandoned by Morgan Fainberg (<email address hidden>) on branch: master
Review: https://review.openstack.org/602808

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/603461

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/603964

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/601881
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8697da7da650e2db29136ce48053ee7c234e3b62
Submitter: Zuul
Branch: master

commit 8697da7da650e2db29136ce48053ee7c234e3b62
Author: Gage Hugo <email address hidden>
Date: Tue Sep 11 17:26:24 2018 -0600

    Add build_target arguement to enforcer

    This change adds in a new arguement "build_target" which takes
    in a passed function to build the enforement target after
    the authentication check. This is to avoid leaking existance
    data when determining scope.

    Change-Id: I9aab71dd0032d40aa2f2e088b529af08b112671f
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/603964
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=d027dd2ba9134629e067b24503cc7f61d75b692d
Submitter: Zuul
Branch: master

commit d027dd2ba9134629e067b24503cc7f61d75b692d
Author: wangxiyuan <email address hidden>
Date: Thu Sep 20 11:25:21 2018 +0800

    Add hint back

    When do Flask refactor, some list APIs missed "hints"
    for wrap_collection.

    Add them back for list resource so that filters can work as
    before

    Change-Id: If32ca8d798c95436f72aa55ac7060e8eb7540de7
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/601882
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=0c71cdd23bd2a7e4f7ec1a5ecec91f3ed7457d00
Submitter: Zuul
Branch: stable/rocky

commit 0c71cdd23bd2a7e4f7ec1a5ecec91f3ed7457d00
Author: morgan fainberg <email address hidden>
Date: Tue Sep 11 16:03:54 2018 -0700

    Ensure view args is in policy dict

    The policy_dict (in enforcement) was not populating the view args
    in a similar manner to the old style @protected decorator. This
    change ensures that we mirror the old behavior (required for
    proper use of v3cloud policy).

    Conflicts:
        keystone/tests/unit/common/test_rbac_enforcer.py

    Change-Id: Ida9009a95a874be9cc60c3152d4e3225726562eb
    Partial-Bug: #1776504
    Closes-Bug: #1792047
    (cherry picked from commit 4975b79e8174587f7639347939cf679460d4896b)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/608756

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609071

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609159

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609500

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609535

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609548

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/603461
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=d97832e8e826e37171b727072c720a9b589998dd
Submitter: Zuul
Branch: master

commit d97832e8e826e37171b727072c720a9b589998dd
Author: morgan fainberg <email address hidden>
Date: Tue Sep 18 10:54:59 2018 -0700

    Convert auth to flask native dispatching

    Convert the /auth paths to flask native dispatching.

    A minor change to additional_urls was implemented to ensure all
    urls are added at once instead of individually (causing an over-
    write issue within flask as a single resource may only have a
    single set of URL mappings).

    Alternate URLs now support adding alternate JSON Home rel links.
    This is to support the case of OS-FEDERATION auth routes moving
    to /auth. The old JSON Home entries must exist but reference
    the new paths.

    This port includes the following test changes (needed due to the
    way flask handles requests and the way requests are passed through
    the auth system):

    * Implemented keystone.common.render_token (module)
      containing render_token_response_from_model and use it instead
      of keystone.common.controller.render_token_response_from_model.

      Minor differences occur in render_token_response_from_model in
      the keystone.common.render_token module, this is simply
      for referencing data from flask instead of the request object.

    * Test cases have been modified to no longer rely on the auth
      controller(s) directly

    * Test cases now use "make_request" as a context manager
      since authenticate/authenticate_for_token directly
      reference the flask contexts and must have an explicit
      context pushed.

    * Test cases no longer pass request objects into methods
      such as authenticate/authenticate_for_token or similar
      methods on the auth plugins

    * Test cases for federation reference the token model now
      where possible instead of the rendered token response.
      Rendered token responses are generated where needed.

    * Auth Plugin Configuration is done in test core as well.
      This is because Auth controller does not exist.

    NOTE: This is a massive change, but must of these changes
    were now easily uncoupled because of how far reaching auth
    is.

    Change-Id: I636928102875760726cc3493775a2be48e774fd7
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/608756
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=54b6227c1fdec1e768570ba696841b00f4e0a549
Submitter: Zuul
Branch: master

commit 54b6227c1fdec1e768570ba696841b00f4e0a549
Author: Morgan Fainberg <email address hidden>
Date: Mon Oct 8 12:28:42 2018 -0700

    Auth flask conversion cleanup

    * Superfluous call to setup token authentication has been removed from
      keystone.server.flask.core

    * Base SAML assertion function has been extracted from
      keystone.api.auth and moved to keystone.api._shared.saml

    Change-Id: Idfa62bf1aea81ef5b4c6f564397e6a0d3ae60417
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609796

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609804

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609805

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609815

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609836

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609837

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609838

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/609839

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/610129

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609071
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=86f968163ea90dfac515b5e59f20edf8c5554cee
Submitter: Zuul
Branch: master

commit 86f968163ea90dfac515b5e59f20edf8c5554cee
Author: Morgan Fainberg <email address hidden>
Date: Mon Oct 8 14:40:56 2018 -0700

    Convert /v3/users to flask native dispatching

    Convert /v3/users to use flask native dispatching.

    The following test changes were required:

    * Application Credentials did not have the plural form
      in the JSON Home document. The JSON Home document was
      corrected both in code and in tests.

    * Application Credentials "patch" test needed to be
      refactored to look for METHOD_NOT_ALLOWED instead
      of NOT FOUND for invalid/unimplemented methods.
      The "assertValidErrorResponse" method was
      insufficient and the test now uses the flask
      test_client mechanism instead.

    Change-Id: Iedaf405d11450b11e2d1fcdfae45ccb8eeb6f255
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/603451
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=46380baeb76fc624bf8b286ce403656767c403cf
Submitter: Zuul
Branch: master

commit 46380baeb76fc624bf8b286ce403656767c403cf
Author: Harry Rybacki <email address hidden>
Date: Tue Sep 18 12:03:52 2018 -0400

    Convert projects API to Flask

    Convert the projects API to Flask native dispatching.

    Change-Id: I3406284acfb7950b701f6a98a3a173a427415f97
    Co-Authored-By: Morgan Fainberg <email address hidden>
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609159
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=0ab08e75b237dd287554e5c86642efcf8292396c
Submitter: Zuul
Branch: master

commit 0ab08e75b237dd287554e5c86642efcf8292396c
Author: Morgan Fainberg <email address hidden>
Date: Tue Oct 9 14:36:20 2018 -0700

    Remove skip for test_locked_out_user_sends_notification

    Remove the explicit skip added pre-user conversion to flask for
    test_locked_out_user_sends_notification.

    Change-Id: I5f2e83f24dca2774fd5abaacf5885a2dab1ae759
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609500
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=35c9bb7eff51ebd6101b4a1d233b984cbf68fca8
Submitter: Zuul
Branch: master

commit 35c9bb7eff51ebd6101b4a1d233b984cbf68fca8
Author: Morgan Fainberg <email address hidden>
Date: Tue Oct 9 17:15:50 2018 -0700

    Convert S3 and EC2 auth to flask native dispatching

    Convert S3 and EC2 auth to flask native dispatching.

    Test changes required:

    * Eliminate direct reference of the EC2 / S3 controllers, originally
      this direct reference was to verify signature checking. Since
      signature checking is an @staticmethod now, direct reference of
      the API resources covers everything.

    * Direct import of keystone.common.controller - due to an oddity in
      how our WSGI code work(s) in test, if nothing imports the common
      controller module, the tests fail using the oslo import_class
      mechanism.

    Change-Id: I06e95957b3ea3a55b0da28959548bd5eb628c70b
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609535
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ee9b035cf17f0070dfb392505e44ea2961e2cf4b
Submitter: Zuul
Branch: master

commit ee9b035cf17f0070dfb392505e44ea2961e2cf4b
Author: Morgan Fainberg <email address hidden>
Date: Wed Oct 10 13:12:32 2018 -0700

    Replace JSON Body middleware with flask-native func

    Replace the JSON Body middleware with flask-native before-request
    function.

    The body filtering and storing data in
    request.environ['openstack.params'] was not used in the code base and
    has been dropped.

    Test Changes:

    * JSON Body middleware has been removed, no testing of the removed code

    * JSON Body Before Request Method has been implemented and associated
      testing (mirroring the JSON Body middleware code).

    * Test entry points no longer looks for JSON Body middleware.

    Change-Id: I84491865870b6bf2b8f094b524ee8b77510f0054
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609548
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=e666839bc170ee3a529e11a78500d34357c8f6ff
Submitter: Zuul
Branch: master

commit e666839bc170ee3a529e11a78500d34357c8f6ff
Author: Morgan Fainberg <email address hidden>
Date: Wed Oct 10 14:23:12 2018 -0700

    Cleanup keystone.server.flask.application

    Remove a chunk of the compat code for legacy dispatching. This moves
    the logging about the request to it's own before_request function.

    Change-Id: I0b1a4ca9a95489e410f055ff47f3399feba3a8f1
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609796
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=9b052e4c059893791dd7adc4aa32d40ac098e788
Submitter: Zuul
Branch: master

commit 9b052e4c059893791dd7adc4aa32d40ac098e788
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 12:32:59 2018 -0700

    Register exceptions with a Flask Error Handler

    Exceptions are now handled in the Flask APP instead of in the
    legacy webob Application code (at this point that code was living
    in the URL Normalizing Middleware). All Keystone API exceptions
    (derived from keystone.exception.Error) are automatically
    registered on definition with the
    keystone.exception.KEYSTONE_API_EXCEPTIONS set. This set is
    processed once the app is created in keystone.server.application
    to the flask-friendly handler.

    TypeError and generic Exception are registered to an explicit
    error handler that converts TypeError to ValidationError (BAD_REQUEST)
    and all other Exceptions to UnexpectedError (INTERNAL SERVER ERROR).
    These exceptions are then emitted in a "jsonify-ed" manner to the
    client.

    Two other minor changes were required:

    * Unenforced API decorator had it's core functionality split into
      a dedicated function that can be called in the case of an error
      being raised in a "before_request" function (such as validation
      in the JSON Body before request func.

    * The JSON Body before request func now explicitly sets the
      api to "unenforced_ok" if it is raising an exception. This
      prevents the flask "was this API enforced" assertion from failing
      because @unenforced_api was never run (the ValidationError was
      raised prior to the resource's method being called).

    Change-Id: I0d0ef6a774eb86b4769238ed34d7703232ce86c3
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609804
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1c05f5f88d84d90ca949bab6e3d48c5f1e35a909
Submitter: Zuul
Branch: master

commit 1c05f5f88d84d90ca949bab6e3d48c5f1e35a909
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 13:05:16 2018 -0700

    Make Request Logging a little better

    Use the flask.request properties instead of direct environ lookups,
    as this is more representative of what is happening in the application.

    Change-Id: Ic16c5ea26b2f526b51ef167e6f6977c72df1d06a
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609805
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=18d597f8e87a7ebee6aba920e11d64bab6dc0295
Submitter: Zuul
Branch: master

commit 18d597f8e87a7ebee6aba920e11d64bab6dc0295
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 13:20:36 2018 -0700

    Internally defined middleware don't use stevedore

    For internally defined middleware (URL Normalizer and AuthContext)
    Do not use stevedore to load, apply directly. This also cleans up
    a lingering entry in the setup.cfg for token_auth.

    Test Changes:

    * entry points test no longer looks for url_normalize and
    build_auth_context

    Change-Id: I58d3c23ad4f70668ada4eae94a94d3f5fe750b3b
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609815
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=848c8fa6385f690b26d22a28cafeb41c3e36b558
Submitter: Zuul
Branch: master

commit 848c8fa6385f690b26d22a28cafeb41c3e36b558
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 13:47:18 2018 -0700

    Convert Normalizing filter to flask native Middleware

    Normalizing filter has been converted to a flask-native style
    middleware instead of leaning on the old application logic from
    Webob. We also now strip all trailing slashes, not just a single
    traling slash.

    Test Changes:

    * test_url_middleware now tests the new middleware directly instead
      of leaning on webob and fake requests.

    Change-Id: I5f82817b61a9284b97cf6443105107150d4a1757
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609836
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=595967bba6c19b709743c2991545662fce9f6da7
Submitter: Zuul
Branch: master

commit 595967bba6c19b709743c2991545662fce9f6da7
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 13:59:58 2018 -0700

    Move AuthContextMiddleware

    Move AuthContextMiddleware to keystone.server.flask.request_processing
    to be more in line with the other internally defined middleware.

    Change-Id: I25b6a88f4b0dc3af306360ee4e5ec0abfe3cf812
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609837
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8a6f1759331cef666279192de1fa3ecd10de702f
Submitter: Zuul
Branch: master

commit 8a6f1759331cef666279192de1fa3ecd10de702f
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 14:06:57 2018 -0700

    Flask comment/docstring cleanup

    Address a few nits in docstrings and comments from the flask conversion
    patches.

    Change-Id: I058d50168c8e5fa566bd98d7dba101ae9e4f1684
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609838
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=ce93950f44b76b409a59d346758360df2a94cdc5
Submitter: Zuul
Branch: master

commit ce93950f44b76b409a59d346758360df2a94cdc5
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 14:30:54 2018 -0700

    Cleanup test_wsgi

    Cleanup test_wsgi and remove un-needed tests. Rename to test_app_config
    to more closely match what is, in-fact, tested now.

    Change-Id: Ifb9dd311da85597d03671a49cf43db43888ad869
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/610129
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=5c70aef2dacf801ccc147be4450e5985f545a855
Submitter: Zuul
Branch: master

commit 5c70aef2dacf801ccc147be4450e5985f545a855
Author: Morgan Fainberg <email address hidden>
Date: Fri Oct 12 10:30:04 2018 -0700

    Make collection_key and member_key raise if unset

    Instead of populating with __UNUSED__ or other silly string, make
    direct use of "collection_key" or "member_key" raise a ValueError
    if they are unset and referenced.

    Change-Id: Idf4f4df9d933317fff96a474cdf23d758ebdfa8c
    Partial-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/609839
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=184c84ae76b1e4dc6b9907caf0cfa0d65bf8ecc5
Submitter: Zuul
Branch: master

commit 184c84ae76b1e4dc6b9907caf0cfa0d65bf8ecc5
Author: Morgan Fainberg <email address hidden>
Date: Thu Oct 11 15:16:02 2018 -0700

    Remove pre-flask legacy code

    This removes common.controller, common.extension, common.router, and
    common.wsgi. Relevant code from common.wsgi (used by AuthContext) was
    moved into keystone.server.flask.request_processing.middleware.auth_context.

    keystone.api.discovery now uses keystone.flask.base_url

    test_middleware and test_exception were modified to reflect the changes
    to the remaining code from keystone.common.wsgi

    keystone.common.authorization only holds a couple constants for auth
    work now.

    Routes is removed from requirements.txt

    Release-Note for migration to flask added.

    Change-Id: I81563b6a49c8f12ecade058a9483f3b6f070dc72
    Closes-Bug: #1776504

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/keystone 15.0.0.0rc1 release candidate.