summaryrefslogtreecommitdiff
path: root/keystoneclient/auth
diff options
context:
space:
mode:
authorJamie Lennox <jamielennox@redhat.com>2014-08-07 13:40:05 +1000
committerJamie Lennox <jamielennox@redhat.com>2014-08-07 13:40:05 +1000
commita8cca7e889a244b1bbdf90cce85fd6cb56b79a22 (patch)
tree160b9f670ce03800e4fc4d05ee01347e08827a38 /keystoneclient/auth
parent4b10d11c1a84dcdfe8d02cf1d80f5ae69be1c352 (diff)
downloadpython-keystoneclient-a8cca7e889a244b1bbdf90cce85fd6cb56b79a22.tar.gz
Mark auth plugin options as secret
By marking the options as secret they don't get printed out in things like the debug log when loading the application. Change-Id: Iadab479a896bc4b1682ee8d207cc50a01dca8255
Diffstat (limited to 'keystoneclient/auth')
-rw-r--r--keystoneclient/auth/identity/v2.py4
-rw-r--r--keystoneclient/auth/identity/v3.py6
-rw-r--r--keystoneclient/auth/token_endpoint.py4
3 files changed, 9 insertions, 5 deletions
diff --git a/keystoneclient/auth/identity/v2.py b/keystoneclient/auth/identity/v2.py
index 72f6259..a8e7ac1 100644
--- a/keystoneclient/auth/identity/v2.py
+++ b/keystoneclient/auth/identity/v2.py
@@ -121,7 +121,7 @@ class Password(Auth):
dest='username',
deprecated_name='username',
help='Username to login with'),
- cfg.StrOpt('password', help='Password to use'),
+ cfg.StrOpt('password', secret=True, help='Password to use'),
])
return options
@@ -148,7 +148,7 @@ class Token(Auth):
options = super(Token, cls).get_options()
options.extend([
- cfg.StrOpt('token', help='Token'),
+ cfg.StrOpt('token', secret=True, help='Token'),
])
return options
diff --git a/keystoneclient/auth/identity/v3.py b/keystoneclient/auth/identity/v3.py
index b385ba6..cd4f9c5 100644
--- a/keystoneclient/auth/identity/v3.py
+++ b/keystoneclient/auth/identity/v3.py
@@ -249,7 +249,7 @@ class Password(AuthConstructor):
deprecated_name='username'),
cfg.StrOpt('user-domain-id', help="User's domain id"),
cfg.StrOpt('user-domain-name', help="User's domain name"),
- cfg.StrOpt('password', help="User's password"),
+ cfg.StrOpt('password', secret=True, help="User's password"),
])
return options
@@ -282,7 +282,9 @@ class Token(AuthConstructor):
options = super(Token, cls).get_options()
options.extend([
- cfg.StrOpt('token', help='Token to authenticate with'),
+ cfg.StrOpt('token',
+ secret=True,
+ help='Token to authenticate with'),
])
return options
diff --git a/keystoneclient/auth/token_endpoint.py b/keystoneclient/auth/token_endpoint.py
index 9c22d44..1f031d2 100644
--- a/keystoneclient/auth/token_endpoint.py
+++ b/keystoneclient/auth/token_endpoint.py
@@ -44,7 +44,9 @@ class Token(base.BaseAuthPlugin):
options.extend([
cfg.StrOpt('endpoint',
help='The endpoint that will always be used'),
- cfg.StrOpt('token', help='The token that will always be used'),
+ cfg.StrOpt('token',
+ secret=True,
+ help='The token that will always be used'),
])
return options