benroeder opened a new pull request, #7216:
URL: https://github.com/apache/opendal/pull/7216

   ## Summary
   - Fixes #7215
   - Add native Keystone v3 password authentication with automatic token 
acquisition and refresh
   - Tokens are refreshed with a 2-minute grace period before expiry
   - Swift storage URL can be discovered from the Keystone service catalog or 
provided explicitly
   - Two auth modes: static token (existing, backward compatible) or Keystone 
v3 (new)
   - New config fields: `auth_url`, `username`, `password`, `project_name`, 
`user_domain_name`, `project_domain_name`
   - Adds `mea` dependency for async mutex (same as other OpenDAL services)
   - Includes 9 unit tests for catalog extraction, response parsing, and signer 
lifecycle
   
   Reference: https://docs.openstack.org/keystone/latest/api_curl_examples.html
   
   ## Test plan
   - All 93 behavior tests pass with Keystone v3 auth against a real OpenStack 
Swift cluster
   - All 93 behavior tests pass with static token against local SAIO (backward 
compatibility)
   - Unit tests cover: catalog extraction (normal, missing, trailing slash, 
prefers public), Keystone response parsing (full and minimal), timestamp 
parsing, static signer never-expire, Keystone signer starts-expired


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to