oslo.context

context does not contain the audit ID from the auth data

Bug #1751886 reported by Adam Young
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
oslo.context
Confirmed
Undecided
Adam Young

Bug Description

When tracking calls across systems, it is important to not record the token ID to the logs, as that is a symmetric shared secret. Instead, the audit ID from the auth data should be used, but cannot as it is in not in the context dictionary.

Adam Young (ayoung)
Changed in oslo.context:
assignee: nobody → Adam Young (ayoung)
Revision history for this message
Ben Nemec (bnemec) wrote :

Isn't tracking calls across systems the purpose of request_id and global_request_id (both of which are in the context)?

Changed in oslo.context:
status: New → Confirmed
Revision history for this message
Herve Beraud (herveberaud) wrote :

Is this bug still relevant?

I can't find trace of the audit ID in oslo.context's source code, and the previous comment from Ben seems to make sense.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.