We are satisfied to announce the release of:
keystoneauth1 2.10.0: Authentication Library for OpenStack Identity
This release is part of the newton release series.
With source available at:
http://git.openstack.org/cgit/openstack/keystoneauth
With package available at:
https://pypi.python.org/pypi/keystoneauth1
Please report issues through launchpad:
http://bugs.launchpad.net/keystoneauth
For more details, please see below.
2.10.0
^^^^^^
Add the prompt parameter to loader Opts
Allow specifying additional_headers to the session and the adapter to
add headers to all requests that pass through these objects.
New Features
************
* Add support for the Client Credentials OpenID Connect grant type.
* Add support for the OpenID Connect Discovery Document
(https://openid.net/specs/openid-connect-
discovery-1_0.html#ProviderMetadata) into the OpenID Connect related
plugins. Now it is possible to only pass the *discovery-url* option
and the plugins will try to fetch the required metadata from there.
* The prompt parameter was added to the Opts provided by auth
plugins. The presence of the prompt parameter on an Option will
indicate to plugin loaders that it is ok to prompt the user for
input for this parameter if none is provided initially. Actual
implementation of this prompting mechanism will be handled by the
individual loaders such as os-client-config.
* Add the ability to provide additional_headers to the session and
adapter object. This will allow clients particularly to provide
additional ways to identify their requests. It will also hopefully
provide an intermediate way to handle setting microversions until we
support them directly with keystoneauth.
Bug Fixes
*********
* [bug 1583682
(https://bugs.launchpad.net/keystoneauth/+bug/1583682)] OpenID
Connect plugins should support OpenID Connect Discovery.
Changes in keystoneauth1 2.9.0..2.10.0
--------------------------------------
6306504 Lazy load oauthlib for plugin loading
712ee40 oidc: add missing 'OidcAccessToken' to __all__
e5fd66c oidc: implement client_credentials grant type
67530bd Fix ECP doc link in Saml2 Password class doc
abb63ce Updated from global requirements
53f1e3c Fix link for "extras dependencies" in extras doc
c21ce26 Add pretty serializer for betamax fixture
bc90281 Update hacking to global-requirements value
701b911 Use SAML2 requests plugin
76bd9bb Updated from global requirements
9bf4efd oidc: move the get_unscoped_auth_ref into the base class
885aff0 oidc: deprecate grant_type argument
00746ea oidc: add discovery document support
1045a14 Add additional_headers to session and adapter
88d4fdb Add Python 3.5 classifier and venv
f2cc77c remove unused LOG
391499f Updated from global requirements
eff0936 Updated from global requirements
71d2e1a Add prompt parameter to Opt
e203d61 Auth plugin for X.509 tokenless authentication
68a7962 oidc: fix OpenID scope management
784ac09 Add create_plugin to loader
Diffstat (except docs and test files)
-------------------------------------
keystoneauth1/adapter.py | 11 +-
keystoneauth1/exceptions/__init__.py | 1 +
keystoneauth1/exceptions/oidc.py | 44 ++
keystoneauth1/extras/_saml2/__init__.py | 2 +
keystoneauth1/extras/_saml2/_loading.py | 4 +
keystoneauth1/extras/_saml2/v3/__init__.py | 2 +
keystoneauth1/extras/_saml2/v3/saml2.py | 514 ++++++++++-----------
keystoneauth1/extras/oauth1/_loading.py | 4 +
keystoneauth1/extras/oauth1/v3.py | 5 +-
keystoneauth1/fixture/keystoneauth_betamax.py | 8 +-
keystoneauth1/fixture/serializer.py | 92 ++++
keystoneauth1/identity/__init__.py | 9 +-
keystoneauth1/identity/generic/token.py | 3 -
keystoneauth1/identity/v3/__init__.py | 7 +-
keystoneauth1/identity/v3/oidc.py | 326 ++++++++++---
keystoneauth1/identity/v3/tokenless_auth.py | 115 +++++
keystoneauth1/loading/_plugins/identity/generic.py | 5 +-
keystoneauth1/loading/_plugins/identity/v2.py | 5 +-
keystoneauth1/loading/_plugins/identity/v3.py | 90 +++-
keystoneauth1/loading/base.py | 22 +-
keystoneauth1/loading/opts.py | 6 +-
keystoneauth1/session.py | 10 +-
.../saml2/fixtures/templates/authn_request.xml | 22 +
...d-oidc-client-credentials-2be065926ba4b849.yaml | 4 +
...iscovery-document-support-b07fe54f83286d62.yaml | 12 +
.../notes/add-prompt-to-opt-d083acc357a7f07b.yaml | 10 +
.../notes/additional-headers-f2d16f85f5abe942.yaml | 10 +
requirements.txt | 2 +-
setup.cfg | 4 +
test-requirements.txt | 7 +-
tox.ini | 2 +-
43 files changed, 1936 insertions(+), 612 deletions(-)
Requirements updates
--------------------
diff --git a/requirements.txt b/requirements.txt
index 0052c69..7fea9a8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10 +10 @@ six>=1.9.0 # MIT
-stevedore>=1.10.0 # Apache-2.0
+stevedore>=1.16.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index df4f591..a0a91cc 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5 +5 @@
-hacking<0.11,>=0.10.0
+hacking<0.12,>=0.11.0 # Apache-2.0
@@ -13 +13 @@ mock>=2.0 # BSD
-oslo.config>=3.10.0 # Apache-2.0
+oslo.config>=3.12.0 # Apache-2.0
@@ -15 +15 @@ oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0
-oslo.utils>=3.14.0 # Apache-2.0
+oslo.utils>=3.15.0 # Apache-2.0
@@ -25,0 +26 @@ testtools>=1.4.0 # MIT
+PyYAML>=3.1.0 # MIT
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
