Use unscoped token to obtain scoped token
Bug #855184 reported by
Ziad Sawalha
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Identity (keystone) |
Fix Released
|
Medium
|
Unassigned | ||
Bug Description
Having to pass in credentials twice (first to get an unstopped token, call GET /tenants, and second to get a token for a specific tenant) is undesirable. Support using the first token to authenticate against a specific tenant.
Revision history for this message
| Ziad Sawalha (ziad-sawalha) wrote | #1 |
Revision history for this message
| Ziad Sawalha (ziad-sawalha) wrote | #2 |
| Changed in keystone: | |
| status: | New → Fix Released |
To post a comment you must log in.
The second token's expiration date should not exceed the supplied token's expiration date. That guarantees that no token is valid after the expiration date since the submission of valid credentials.