support new authentication method `application credential`

Bug #1856286 reported by Charles Hsu
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-keystoneclient
Invalid
Undecided
Unassigned

Bug Description

It seems like new auth method (application_credential) is ready.
https://docs.openstack.org/api-ref/identity/v3/?expanded=authenticating-with-an-application-credential-detail,password-authentication-with-unscoped-authorization-detail#authenticating-with-an-application-credential

Also, openstackclient already support that, keystone client should support that.

$ env |grep OS_
OS_IDENTITY_API_VERSION=3
OS_AUTH_TYPE=v3applicationcredential
OS_APPLICATION_CREDENTIAL_SECRET=demo
OS_AUTH_URL=http://192.168.190.1:5000/v3
OS_APPLICATION_CREDENTIAL_ID=50916383859f4d2f919c86315ffa17ba

$ openstack token issue
+------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field | Value |
+------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| expires | 2019-12-13T09:51:16+0000 |
| id | gAAAAABd81EEZ-gtwlF46n0Q4tVxqa781-toBDyPMRve8Wg6CZEoDBWV2ELCEdEH6UYF_zTV1ZUQ5mqAyyZrEsArXh30lDWTwi2XBHjBj4EAh2zlT2VLqt59Ed3frNPKgwm9I9w0sM-1BDFN4um5G5M_g0Dwp4vqqQmS5i03lp9ZjWTgZTomdYDHa-baaF1Zli57VOGuIjy6 |
| project_id | 8067ba66f53d455eb3d7282b3916eb64 |
| user_id | 22769cb54958403bb43151e63d3d3463 |
+------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Revision history for this message
Xuanyuan Zhang (zhangxuanyuan) wrote :

With V3,maybe openstackclient should be used more。

Revision history for this message
Charles Hsu (charles0126) wrote :

Hi Xuanyuan, Thanks for the response! Yes, openstack client works well. Just curious if the keystoneclient will support that? Or keystoneclient will be deprecated?

Revision history for this message
Colleen Murphy (krinkle) wrote :

python-keystoneclient uses keystoneauth sessions and therefore supports any auth method that keystoneauth supports. keystoneauth has support for the application credential auth method:

https://docs.openstack.org/keystoneauth/latest/authentication-plugins.html#application-credentials

See the following for using keystoneauth in keystoneclient:

https://docs.openstack.org/keystoneauth/latest/using-sessions.html#sessions-for-users

Changed in python-keystoneclient:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.