For what it's worth, I still think it's better to translate the Unauthorized exception from the neutron client in nova so the nova response is a 401 rather than 500, because we know it's a bad token, regardless of if the token expired or the user was disabled.
Handling this better with trusts or service tokens is a separate issue so we don't get the 401 in the first place.
For what it's worth, I still think it's better to translate the Unauthorized exception from the neutron client in nova so the nova response is a 401 rather than 500, because we know it's a bad token, regardless of if the token expired or the user was disabled.
Handling this better with trusts or service tokens is a separate issue so we don't get the 401 in the first place.