delta/openstack/python-openstackclient.git/openstackclient/api/auth.py, branch 3.15.0

Remove a bunch of things we promised to remove in 2H 2017

2017-11-30T21:35:42+00:00

Change-Id: I060559fe13e354fe87551cd9dd82774bddb54640

Add importing file to import warnings

2016-08-30T14:21:02+00:00

Add the Python file doing the import to the warnings emitted by
the modules moved to osc-lib. Users will at least have a hint as
to which package is out-of-date.

Change-Id: I633b440c30b2b15cfde7a9013e30dfa39ab200bc

osc-lib: api.auth

2016-06-30T13:57:59+00:00

Move auth plugin checking to osc-lib.

Change-Id: I673d9c2d6e8bbf724c3000459a729e831d747814

Remove OSCGenericPassword plugin

2016-06-22T18:54:32+00:00

The need for this has passed plus with 3.0 we can take the breakage hit,
if any.

Change-Id: Ic019842f00033d2cd67b75f036e7e817e4b7c075

Refactor setting defaults for some scope parameters

2016-06-21T06:55:30+00:00

The code is setting defaults for some scope parameters, cheking if the
name ends with some specific substring (namely ending in "password")
causing failures in some plugins that end with the same string, but do
not allow those parameters (like "user_domain_id" in "v3oidcpassword").

Closes-Bug: #1582774
Change-Id: Id7036db3b783b135353d035dc4c1df7c808d6474

Refactor check_valid_auth_options function

2016-06-21T06:54:36+00:00

The functions check_valid_auth_options() function was relying on the name
for checking the set of required options, but this could cause errors
with external auth plugins. If somebody defines an auth plugin plugin
named "footoken" the check function would check for a "token" option,
even if the plugin has not defined that option. This change tries to
improve this situation, cheking for some options only if they have been
defined in the plugin.

Change-Id: I4255f2e7d4d23449c95be957ea7b6b60983f2608

Do not prompt for scope options with default scoped tokens

2016-06-17T16:37:15+00:00

This changes the scope validation to occur after a token has already
been created.

Previous flow:

1. Validate authentication options.
2. Validate authorization options if the command requires a scope.
3. Create a token (using authentication + authorization options)
4. Run command.

This means that scope was being checked, even if a default scope was
applied in step 3 by Keystone.

New flow:

1. Validate authentication options.
2. Create token (using authentication + authorization options)
3  Validate authorization options if the command requires a scope and
   the token is not scoped.
4. Run command.

Change-Id: Idae368a11249f425b14b891fc68b4176e2b3e981
Closes-Bug: 1592062

Fix missing i18n supports in api/ and shell.py

2016-06-14T16:03:56+00:00

Change-Id: I28d79d7f44b27d2b600dedad2a3601180650ad83
Partial-bug: #1574965

osc-lib: utils

2016-06-13T15:50:44+00:00

Use osc-lib directly for utils.

Leave openstackclient.common.utils for deprecation period.

Change-Id: I5bd9579abc4e07f45219ccd0565626e6667472f7

osc-lib: exceptions

2016-06-13T15:50:01+00:00

Use osc-lib directly for exceptions.

Leave openstackclient.common.exceptions for deprecation period.

Change-Id: Iea3e862302372e1b31ccd27f69db59b4953ca828