API returns 401 for /v2.1 (when no auth provided)

[Radosław Piliszek]

As the subject goes, nova-api returns 401 for /v2.1 (when no auth provided). This is far from sensitive information as it is revealed on / which does not return 401.

I discovered this debugging js-openstack-lib.

This is not a problem for other tested services (neutron, glance) as they are registered w/o version in catalog.

(please let me know if this is actually desired behavior)

[Balazs Gibizer (balazs-gibizer)]

With a valid token:
* GET http://192.168.121.129/compute/v2.1 -> returns 302
* GET http://192.168.121.129/compute/v2.1/ -> returns the version document
* GET http://192.168.121.129/compute -> returns the version document
* GET http://192.168.121.129/compute/ -> returns the version document

Without token
* GET http://192.168.121.129/compute/v2.1 -> 401
* GET http://192.168.121.129/compute/v2.1/ -> 401
* GET http://192.168.121.129/compute -> returns the version document
* GET http://192.168.121.129/compute/ -> returns the version document

So this still seems to be inconsistent

[Balazs Gibizer (balazs-gibizer)]

Hold on, we have a fairly recent patch https://review.opendev.org/#/c/685181/ I did not have in my devstack for the above test. retesting...

[Balazs Gibizer (balazs-gibizer)]

OK I confirmed that https://review.opendev.org/#/c/685181/ fixed the reported bug and now with and without the token each query returns the same version document.