** Changed in: keystone
Status: In Progress => Fix Released
** Changed in: keystoneauth
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1637682
Title:
[api] scoped string defined as 'unscope: {}'
Status in OpenStack Identity (keystone):
Fix Released
Status in keystoneauth:
Fix Released
Bug description:
keystoneauth1/identity/v3/base.py:
...
elif self.unscoped:
body['auth']['scope'] = {'unscoped': {}}
...
According to Identity API v3 spec( http://developer.openstack.org/api-
ref/identity/v3/index.html?expanded=password-authentication-with-
unscoped-authorization-detail,password-authentication-with-scoped-
authorization-detail ), there should be no '{'scope': {'unscoped':
{}}' in 'auth'. For some keystone version which is strictly following
the spec, it would be an security error, so the code slice should be
deleted.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1637682/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
