Comment 4 for bug 1797446

Revision history for this message
Morgan Fainberg (mdrnstm) wrote :

Hmm. The more I look at it the more I think the change can be super small:

Removal of "_confirm_token_bind" [With fernet only, token binding is dead]

Change process_request to pull apart the request and do the work with just the data such as "request.user_token".

This is a small amount of work to make it so Keystone can lean on KSM without needing to run it as a full middleware.