Revocation API is used in places where where it doesn't need to be
Bug #1671887 reported by
Lance Bragstad
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
In Progress
|
Low
|
Vishakha Agarwal |
Bug Description
Since keystone now validates UUID and Fernet tokens the same way - by rebuilding the token context at validation time, we no longer need to persist certain types of revocation events.
For example, a revocation event is persisted when a role is deleted. This is no longer needed because the invalidation happens by design of the token provider.
Opening this bug so that we can track those cases and remove them.
- revoking when a user is removed from a project
- revoking when a role is deleted
Changed in keystone: | |
status: | New → Confirmed |
importance: | Undecided → Low |
Changed in keystone: | |
assignee: | Lance Bragstad (lbragstad) → Richard (csravelar) |
Changed in keystone: | |
assignee: | Lance Bragstad (lbragstad) → Richard (csravelar) |
description: | updated |
Changed in keystone: | |
assignee: | Richard (csravelar) → Steve Martinelli (stevemar) |
Changed in keystone: | |
assignee: | Steve Martinelli (stevemar) → Richard (csravelar) |
tags: | added: performance |
To post a comment you must log in.
Fix proposed to branch: master /review. openstack. org/444424
Review: https:/