keystoneauth doesn't support auth receipts or MFA
Bug #1839748 reported by
Adrian Turjak
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
keystoneauth |
Fix Released
|
High
|
Adrian Turjak |
Bug Description
keystoneauth needs to raise a specific catchable error when a 401 with an auth receipt is returned.
It also needs a way to continue auth with that receipt, or even do multi-method auth to avoid needing a receipt up front.
Changed in keystoneauth: | |
assignee: | nobody → Adrian Turjak (adriant-y) |
status: | New → In Progress |
Changed in keystoneauth: | |
importance: | Undecided → High |
To post a comment you must log in.
Reviewed: https:/ /review. opendev. org/675049 /git.openstack. org/cgit/ openstack/ keystoneauth/ commit/ ?id=6a69e4dfbdc 2762445b0f16a9e 2c66e06f3b2bab
Committed: https:/
Submitter: Zuul
Branch: master
commit 6a69e4dfbdc2762 445b0f16a9e2c66 e06f3b2bab
Author: Adrian Turjak <email address hidden>
Date: Wed Aug 7 19:51:59 2019 +1200
add support for auth_receipts and multi-method auth
- new exception when an auth receipt is returned.
- a new method for auth receipt.
- support to existing v3 Auth plugins to add additional methods.
- Added a new MultiFactor plugin with loading support which
takes method names as strings.
Change-Id: Ie6601a50011118 e3a07be9752f747 c2298ff5230
Closes-Bug: #1839748