status 403 Not Authorized is not valid
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Low
|
Sahdev Zala |
Bug Description
Keystone responds to some requests with a status line of 403 Not Authorized. This is not valid HTTP. The status text for 403 should be Forbidden, see http://
Here's an example:
$ curl -i -H "X-Auth-Token: $DEMO_TOKEN" http://
HTTP/1.1 403 Not Authorized
Vary: X-Auth-Token
Content-Type: application/json
Content-Length: 144
Date: Sat, 09 Mar 2013 23:12:28 GMT
{"error": {"message": "You are not authorized to perform the requested action: identity:
This should be:
$ curl -i -H "X-Auth-Token: $DEMO_TOKEN" http://
HTTP/1.1 403 Forbidden
Vary: X-Auth-Token
Content-Type: application/json
Content-Length: 144
Date: Sat, 09 Mar 2013 23:12:28 GMT
{"error": {"message": "You are not authorized to perform the requested action: identity:
Changed in keystone: | |
assignee: | nobody → Sahdev Zala (spzala) |
Changed in keystone: | |
status: | New → Triaged |
importance: | Undecided → Low |
Changed in keystone: | |
milestone: | none → havana-1 |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | havana-1 → 2013.2 |
Fix proposed to branch: master /review. openstack. org/28053
Review: https:/