Automatically redirect to the password change when it's expired

Unfortunately the only way we can know the user_id at this point is
by parsing the error message.

I also refactored the exceptions in openstack_auth to make them use
different classes (but one common superclass).

Partially implements blueprint: allow-users-change-expired-password

Change-Id: Ieceee09db21040b96577db19bd195dc3799e3892

1 files changed, 32 insertions, 0 deletions

diff --git a/openstack_auth/exceptions.py b/openstack_auth/exceptions.py
index cce0d6543..5925981c3 100644
--- a/openstack_auth/exceptions.py
+++ b/openstack_auth/exceptions.py
@@ -14,3 +14,35 @@
 
 class KeystoneAuthException(Exception):
     """Generic error class to identify and catch our own errors."""
+
+
+class KeystoneTokenExpiredException(KeystoneAuthException):
+    """The authentication token issued by the Identity service has expired."""
+
+
+class KeystoneNoBackendException(KeystoneAuthException):
+    """No backend could be determined to handle the provided credentials."""
+
+
+class KeystoneNoProjectsException(KeystoneAuthException):
+    """You are not authorized for any projects or domains."""
+
+
+class KeystoneRetrieveProjectsException(KeystoneAuthException):
+    """Unable to retrieve authorized projects."""
+
+
+class KeystoneRetrieveDomainsException(KeystoneAuthException):
+    """Unable to retrieve authorized domains."""
+
+
+class KeystoneConnectionException(KeystoneAuthException):
+    """Unable to establish connection to keystone endpoint."""
+
+
+class KeystoneCredentialsException(KeystoneAuthException):
+    """Invalid credentials."""
+
+
+class KeystonePassExpiredException(KeystoneAuthException):
+    """The password is expired and needs to be changed."""