Hmm. The more I look at it the more I think the change can be super small:
Removal of "_confirm_token_bind" [With fernet only, token binding is dead]
Change process_request to pull apart the request and do the work with just the data such as "request.user_token".
This is a small amount of work to make it so Keystone can lean on KSM without needing to run it as a full middleware.
Hmm. The more I look at it the more I think the change can be super small:
Removal of "_confirm_ token_bind" [With fernet only, token binding is dead]
Change process_request to pull apart the request and do the work with just the data such as "request. user_token" .
This is a small amount of work to make it so Keystone can lean on KSM without needing to run it as a full middleware.