> P.S. the X-Subject-Token stuff is breaking HTTP; you need to either put the 
> token (or a facsimile for it) in the URL, or put Vary: Subject-Token in EVERY 
> response those resources generate. The former is preferred; this is over TLS, 
> right? Sorry I didn't see that earlier.
> 
> P.P.S If it's not too late, drop the X- from that header! 
> <http://tools.ietf.org/html/draft-ietf-appsawg-xdash-05>

Mark - could you open a bug against Keystone for the X-Subject-Token "breaking 
HTTP" with the relevant details?

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Reply via email to