On 26/06/13 12:55 -0400, Adam Young wrote:
Glance:
- Uses httplib for communication
- Uses keystoneclient within cli
- Checks that socket is patched before importing eventlet for httplib.
FWIW, we're working on the migration to requests.
Cheers,
FF
--
@flaper87
Flavio Percoco
__
On 06/27/2013 10:35 AM, Thierry Carrez wrote:
Adam Young wrote:
Right now Keystone provides so called bearer tokens: This means that whoever
has a token can do whatever the token entitles him to do. If I
manage to get somebody's token I can do whatever this person is able to do.
Right. Tokens
On 06/27/2013 10:45 PM, Simo Sorce wrote:
On Thu, 2013-06-27 at 17:49 -0700, Clint Byrum wrote:
On 2013-06-27 16:28, Jamie Lennox wrote:
On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote:
On 27 June 2013 04:55, Adam Young wrote:
Right now Keystone provides so called bearer tokens: This
On Fri, Jun 28, 2013 at 10:12 AM, Steven Hardy wrote:
> Obviously long-term a keystone native way to sign requests would be great,
> and could be used by Heat, and e.g Swift which has it's own method for
> generating pre-signed URLs.
fyi: only when you are using the temporary url feature you are
On Thu, Jun 27, 2013 at 05:49:00PM -0700, Clint Byrum wrote:
> On 2013-06-27 16:28, Jamie Lennox wrote:
> >On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote:
> >>On 27 June 2013 04:55, Adam Young wrote:
> >>>Right now Keystone provides so called bearer tokens: This
> >>>means that whoever
>
On Thu, 2013-06-27 at 17:49 -0700, Clint Byrum wrote:
> On 2013-06-27 16:28, Jamie Lennox wrote:
> > On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote:
> >> On 27 June 2013 04:55, Adam Young wrote:
> >>> Right now Keystone provides so called bearer tokens: This means that
> >>> whoever
> >>
On 2013-06-27 16:28, Jamie Lennox wrote:
On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote:
On 27 June 2013 04:55, Adam Young wrote:
Right now Keystone provides so called bearer tokens: This means that
whoever
has a token can do whatever the token entitles him to do. If I
manage to get
On Thu, 2013-06-27 at 16:35 +0200, Thierry Carrez wrote:
> Adam Young wrote:
> > Right now Keystone provides so called bearer tokens: This means that
> > whoever has a token can do whatever the token entitles him to do. If I
> > manage to get somebody's token I can do whatever this person is able
On Thu, 2013-06-27 at 11:39 -0400, Jay Pipes wrote:
> On 06/26/2013 12:55 PM, Adam Young wrote:
> > Glance:
> > - Uses httplib for communication
> > - Uses keystoneclient within cli
> > - Checks that socket is patched before importing eventlet for httplib.
>
> For the record, Glance uses httplib,
On Fri, 2013-06-28 at 07:01 +1200, Robert Collins wrote:
> On 27 June 2013 04:55, Adam Young wrote:
> > Right now Keystone provides so called bearer tokens: This means that whoever
> > has a token can do whatever the token entitles him to do. If I
> > manage to get somebody's token I can do whatev
On 27 June 2013 04:55, Adam Young wrote:
> Right now Keystone provides so called bearer tokens: This means that whoever
> has a token can do whatever the token entitles him to do. If I
> manage to get somebody's token I can do whatever this person is able to do.
> To fix it, the other services tha
On 06/26/2013 12:55 PM, Adam Young wrote:
Glance:
- Uses httplib for communication
- Uses keystoneclient within cli
- Checks that socket is patched before importing eventlet for httplib.
For the record, Glance uses httplib, not httplib2, for its
request/response handling because httplib2 does
Adam Young wrote:
> Right now Keystone provides so called bearer tokens: This means that whoever
> has a token can do whatever the token entitles him to do. If I
> manage to get somebody's token I can do whatever this person is able to do.
Right. Tokens are considered secrets for that reason.
>
13 matches
Mail list logo
