keystoneauth doesn't support auth receipts or MFA

Bug #1839748 reported by Adrian Turjak
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
keystoneauth
Fix Released
High
Adrian Turjak

Bug Description

keystoneauth needs to raise a specific catchable error when a 401 with an auth receipt is returned.

It also needs a way to continue auth with that receipt, or even do multi-method auth to avoid needing a receipt up front.

Changed in keystoneauth:
assignee: nobody → Adrian Turjak (adriant-y)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystoneauth (master)

Reviewed: https://review.opendev.org/675049
Committed: https://git.openstack.org/cgit/openstack/keystoneauth/commit/?id=6a69e4dfbdc2762445b0f16a9e2c66e06f3b2bab
Submitter: Zuul
Branch: master

commit 6a69e4dfbdc2762445b0f16a9e2c66e06f3b2bab
Author: Adrian Turjak <email address hidden>
Date: Wed Aug 7 19:51:59 2019 +1200

    add support for auth_receipts and multi-method auth

    - new exception when an auth receipt is returned.
    - a new method for auth receipt.
    - support to existing v3 Auth plugins to add additional methods.
    - Added a new MultiFactor plugin with loading support which
      takes method names as strings.

    Change-Id: Ie6601a50011118e3a07be9752f747c2298ff5230
    Closes-Bug: #1839748

Changed in keystoneauth:
status: In Progress → Fix Released
Colleen Murphy (krinkle)
Changed in keystoneauth:
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/keystoneauth 3.17.0

This issue was fixed in the openstack/keystoneauth 3.17.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.