Credential list API returns list of available credentials when user passes invalid name as query parameter
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
In Progress
|
Wishlist
|
Vishakha Agarwal |
Bug Description
In credential list API, when user passes the query parameter as name with invalid value then, it returns list of all available credentials.
Steps to reproduce:
1. Curl Command
curl -g -i -X GET http://
2. Response
HTTP/1.1 200 OK
Date: Thu, 25 May 2017 11:40:57 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: X-Auth-Token
Content-Type: application/json
Content-Length: 410
x-openstack-
Connection: close
3. Output
{"credentials": [{"user_id": "8c3b0c35d48142
In my opinion to maintain the consistency, Credential list API should return empty list when invalid query parameter is passed. Same issue is present for the policy API also.
master:
commit e171c7905556d37
Author: OpenStack Proposal Bot <email address hidden>
Date: Sat May 20 04:36:44 2017 +0000
Changed in keystone: | |
assignee: | nobody → Pooja Jadhav (poojajadhav) |
Changed in keystone: | |
status: | New → In Progress |
Changed in keystone: | |
assignee: | nobody → Vishakha Agarwal (vishakha.agarwal) |
The team had plans to deprecate the Credential and Policy APIs in the Pike release. Since that's the plan moving forward, I'm not sure it makes sense investing time into fixing the query parameter issues with those APIs.