Comment 3 for bug 1541621

Revision history for this message
Lance Bragstad (lbragstad) wrote : Re: Invalid subject fernet token should result in 404 instead of 401

The fernet provider leverages the get_token_data() method in keystone/token/providers/common.py. We could add a check when we populate the scope there - https://github.com/openstack/keystone/blob/931d589586a99f057ce17b9f3f0f6ec954031d7d/keystone/token/providers/common.py#L379