GitHub / openstack/keystone / commits
OpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 16afc813 | merge Merge "Abandon server-side paged search cursor when sizelimit is reached" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
22 days ago | |
| 1573ae6a | merge Merge "Fix BOLA in access rule GET/DELETE and ownership check in CREATE" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
22 days ago | |
| bf980ee1 | merge Merge "Fix token chain revocation and add user-scoped revocation API" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
24 days ago | |
| 30ef2ffa | merge Merge "Make JWT token signing algorithm configurable" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| 59135887 | merge Merge "Ban ec2credential tokens from Keystone API" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| 3a7f6f86 | merge Merge "Remove testing the oslo_policy[enforce_scope]=False" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| 61c1dd61 | merge Merge "Remove setting of oslo_policy[enforce_scope] flag" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| 348fac8e | merge Merge "Invalidate assignment cache on modify operations" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| 9e5a8269 | merge Merge "Avoid refetching credentials in list API" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
about 1 month ago | |
| b5abcae8 |
Invalidate assignment cache on modify operations
Signed-off-by: Artem Goncharov <a****v@g****m> |
Artem Goncharov <a****v@g****m> | about 1 month ago | |
| 910ebab0 |
Ban ec2credential tokens from Keystone API
Signed-off-by: Artem Goncharov <a****v@g****m> |
Artem Goncharov <a****v@g****m> | about 1 month ago | |
| 2513d1dc |
Fix federation user deletion
Signed-off-by: Artem Goncharov <a****v@g****m> |
Artem Goncharov <a****v@g****m> | about 2 months ago | |
| 5103d433 |
Avoid refetching credentials in list API
Signed-off-by: Yushiro Furukawa <y****a@l****p> |
Yushiro Furukawa <y****a@l****p> | about 2 months ago | |
| 8303bd08 |
Remove testing the oslo_policy[enforce_scope]=False
Signed-off-by: Ghanshyam Maan <g****4@g****m> |
Ghanshyam Maan <g****4@g****m> | 2 months ago | |
| d4f0c20b |
Remove setting of oslo_policy[enforce_scope] flag
Signed-off-by: Ghanshyam Maan <g****4@g****m> |
Ghanshyam Maan <g****4@g****m> | 2 months ago | |
| 4172e784 |
Materialize limit backend queries in read sessions
Signed-off-by: Sean Mooney <w****k@s****o> |
Sean Mooney <w****k@s****o> | 3 months ago | |
| eb3c0cd9 | merge Merge "Fix LDAP pagination to return all users beyond page_size" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| bf428dab |
Abandon server-side paged search cursor when sizelimit is reached
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 3 months ago | |
| 4a6ba41c | merge Merge "Prevent RBAC policy bypass via JSON body and query filters (CVE-2026-4... |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| 7a5a4edb | merge Merge "Preserve expires_at when rescoping federated tokens (CVE-2026-44394)" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| 0c352fb2 | merge Merge "Forbid trust operations using application credentials (CVE-2026-43000)" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| f0305b29 | merge Merge "Fix user impersonation through application credentials (CVE-2026-42998)" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| 9880ab97 | merge Merge "Enforce delegation project boundary for delegated tokens" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
3 months ago | |
| b698f56a |
Add audience mapper to devstack Keycloak client
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 3 months ago | |
| 0a902c4c |
Fix token chain revocation and add user-scoped revocation API
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 3 months ago | |
| 117cb88e |
Fix BOLA in access rule GET/DELETE and ownership check in CREATE
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| 8e78573a |
Materialize lazy SQL backend queries
Signed-off-by: Sean Mooney <w****k@s****o> |
Sean Mooney <w****k@s****o> | 4 months ago | |
| c384c163 |
Add regression tests for lazy query DB leaks
Signed-off-by: Sean Mooney <w****k@s****o> |
Sean Mooney <w****k@s****o> | 4 months ago | |
| 14a14473 |
Forbid trust operations using application credentials (CVE-2026-43000)
Co-authored-by: Boris Bobrov <b****v@s****m> Signed-off-by: Grzegorz Grasza <x****k@r****m>, Artem Goncharov <a****v@g****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| b4f1eb1f |
Fix user impersonation through application credentials (CVE-2026-42998)
Co-authored-by: Boris Bobrov <b****v@s****m> Signed-off-by: Grzegorz Grasza <x****k@r****m>, Artem Goncharov <a****v@g****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| f9460530 |
Preserve expires_at when rescoping federated tokens (CVE-2026-44394)
Co-authored-by: Artem Goncharov <a****v@g****m> Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| a9d6832a |
Prevent RBAC policy bypass via JSON body and query filters (CVE-2026-42999)
Co-authored-by: Boris Bobrov <b****v@s****m>, Artem Goncharov <a****v@g****m> Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| 2230026f | merge Merge "Fix keystone scope flag in tempest.conf" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
4 months ago | |
| f82b0935 |
Enforce delegation project boundary for delegated tokens
Signed-off-by: Grzegorz Grasza <x****k@r****m>, Artem Goncharov <a****v@g****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| b6fd8099 |
Enforce app cred project boundary on EC2 credential paths
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 4 months ago | |
| f9a4a551 |
Make JWT token signing algorithm configurable
Signed-off-by: Mauricio Harley <m****y@r****m> |
Mauricio Harley <m****y@r****m> | 4 months ago | |
| 80d5b7bf | merge Merge "Fix pagination next link duplicating URL prefix" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| 067c2706 | merge Merge "Imported Translations from Zanata" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| d0746552 | merge Merge "api-ref: Indicate domain, project ID requirements for limits" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| bdc4135b | merge Merge "Remove legacy list_user_ids_for_project" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| fd2e29cb | merge Merge "Fix sub-resource pagination crash" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| b8ed1c4a |
api-ref: Indicate domain, project ID requirements for limits
Signed-off-by: Stephen Finucane <s****n@r****m> |
Stephen Finucane <s****n@r****m> | 5 months ago | |
| 3ed49239 |
Imported Translations from Zanata
Signed-off-by: OpenStack Proposal Bot <o****a@l****g> |
OpenStack Proposal Bot <o****a@l****g> | 5 months ago | |
| ee72f056 | merge Merge "Remove unused Makefile for doc" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| 29246c5f |
Block app cred tokens from authorizing OAuth1 requests
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m>
Committed by: Grzegorz Grasza <x****k@r****m> |
5 months ago | |
| d6a3dc51 |
Block restricted app creds from creating EC2 credentials via /credentials
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m>
Committed by: Grzegorz Grasza <x****k@r****m> |
5 months ago | |
| c87ce6ed |
Add tests for restricted app cred guard
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m>
Committed by: Grzegorz Grasza <x****k@r****m> |
5 months ago | |
| 91688d9d | merge Merge "Remove V2 get_catalog from catalog driver" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| 8482b96b | merge Merge "Remove legacy remove_role_from_user_and_project" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| fc81c57a | merge Merge "Include system scope in rescope guard" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| 7fd5170b | merge Merge "Block app credential token rescoping" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| 18e6fd7d |
Fix LDAP pagination to return all users beyond page_size
Signed-off-by: Moutaz Chaara <m****a@s****m> |
Moutaz Chaara <m****a@s****m> | 5 months ago | |
| dd1df340 | merge Merge "Fix OIDC federation UTF-8 double-encoding of non-ASCII characters" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| e5aa2e92 | merge Merge "Update master for stable/2026.1" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
5 months ago | |
| bcc8e819 |
Include system scope in rescope guard
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 5 months ago | |
| 1e13c5f2 |
Pin openapi-core version in the api-ref job
Signed-off-by: Artem Goncharov <a****v@g****m> |
Artem Goncharov <a****v@g****m> | 5 months ago | |
| 1678987b |
Fix OIDC federation UTF-8 double-encoding of non-ASCII characters
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 5 months ago | |
| 836f6b98 |
Block app credential token rescoping
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 5 months ago | |
| 5fe958ba |
Update master for stable/2026.1
Signed-off-by: OpenStack Release Bot <i****t@o****g> |
OpenStack Release Bot <i****t@o****g> | 5 months ago | |
| c3806168 |
Remove legacy list_user_ids_for_project
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 6 months ago | |
| d2492ec5 |
Remove V2 get_catalog from catalog driver
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 6 months ago | |
| f56ae26d |
Remove legacy remove_role_from_user_and_project
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 6 months ago | |
| 3526925a | merge Merge "Keystone identity mapping to support project definition as a JSON" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| cb4dcb07 |
Fix pagination next link duplicating URL prefix
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 6 months ago | |
| 5c2c9958 |
Fix sub-resource pagination crash
Signed-off-by: Boris Bobrov <b****v@s****m> |
Boris Bobrov <b****v@s****m> | 6 months ago | |
| 2f508567 | merge Merge "api-ref: add missing enabled field on endpoint" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| 0b1c04d0 | merge Merge "Add JSON schema and validation for `federation protocol`" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| af77e611 | merge Merge "tox: Drop basepython" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| 43b515f2 | merge Merge "Add OpenID Connect CLI authentication examples" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| e88f3888 |
Prevent unauthorized EC2 credential creation and deletion
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m>
Committed by: Artem Goncharov <a****v@g****m> |
6 months ago | |
| ef8eed29 |
Remove unused Makefile for doc
Signed-off-by: Takashi Kajinami <k****t@o****m> |
Takashi Kajinami <k****t@o****m> | 6 months ago | |
| 8d2df521 | merge Merge "Fix project policy allowing unauthorized access to root domains" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| c095f86d | merge Merge "Move keystone-tempest-federation to noble" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| 456c24bb |
Move keystone-tempest-federation to noble
Signed-off-by: Takashi Kajinami <k****t@o****m> |
Takashi Kajinami <k****t@o****m> | 6 months ago | |
| 7fcad2fe | merge Merge "Bump flake8-import-order" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
6 months ago | |
| 5700a21f |
Bump flake8-import-order
Signed-off-by: Takashi Kajinami <k****t@o****m> |
Takashi Kajinami <k****t@o****m> | 6 months ago | |
| 38d5a439 |
Fix keystone scope flag in tempest.conf
Signed-off-by: Douglas Mendizábal <d****a@r****m> |
Douglas Mendizabal <d****a@r****m>
Committed by: Douglas Mendizábal <d****a@r****m> |
7 months ago | |
| 7b5702f9 | merge Merge "Replace deprecated warn method" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
7 months ago | |
| 81e2908a | merge Merge "Copy env to subprocess in policy test" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
7 months ago | |
| 4b0ec066 | merge Merge "SSO template now HTML5 validate" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
7 months ago | |
| 81ab5e95 |
tox: Drop basepython
Co-authored-by: Takashi Kajinami <k****t@o****m> Signed-off-by: Ivan Anfimov <l****m@g****m> |
Ivan Anfimov <l****m@g****m> | 7 months ago | |
| 1f841936 |
Copy env to subprocess in policy test
Signed-off-by: Douglas Mendizábal <d****a@r****m> |
Douglas Mendizabal <d****a@r****m> | 7 months ago | |
| 8a42793e |
Update hard-coded policy for GET /v3/limits
Signed-off-by: Douglas Mendizábal <d****a@r****m> |
Douglas Mendizábal <d****s@r****o>
Committed by: Douglas Mendizabal <d****a@r****m> |
8 months ago | |
| 57a0a59c |
Fix project policy allowing unauthorized access to root domains
Signed-off-by: Dong Ma <w****g@g****m> |
Dong Ma <w****g@g****m> | 8 months ago | |
| 55bedf65 |
Add OpenID Connect CLI authentication examples
Signed-off-by: Grzegorz Grasza <x****k@r****m> |
Grzegorz Grasza <x****k@r****m> | 8 months ago | |
| a903b505 | merge Merge "Improve federated mapping documentation clarity" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| e2d3c6fb | merge Merge "Cap hacking" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| 39ac6e70 | merge Merge "Drop flake8-docstrings" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| d9d20173 |
Replace deprecated warn method
Signed-off-by: Takashi Kajinami <k****t@o****m> |
Takashi Kajinami <k****t@o****m> | 8 months ago | |
| 19e1b3fc | merge Merge "Drop unused tempest from test requirements" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| c3bfa092 | merge Merge "Drop workaround for sphinx-feature-classification < 0.4.2" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| 44e058fe | merge Merge "api-ref: Add description field in Endpoint" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
8 months ago | |
| c914f1b7 |
api-ref: add missing enabled field on endpoint
Signed-off-by: Winicius Silva <w****2@g****m> |
Winicius Silva <w****2@g****m> | 9 months ago | |
| bd178ee9 |
Fix small typo about ec2tokens in documentation
Signed-off-by: Arnaud Morin <a****n@o****m> |
Arnaud Morin <a****n@o****m> | 9 months ago | |
| 5b5c573c | merge Merge "Ignore codegenerator working directory" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago | |
| fb730b74 | merge Merge "api-ref: Add (deprecated) endpoint name docs" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago | |
| a71b056a | merge Merge "Use native hook of bashate" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago | |
| 56ec69d0 | merge Merge "Remove unused bandit target" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago | |
| 64a06477 | merge Merge "Fix role assignment cache for federated users" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago | |
| 8da7387a | merge Merge "Import LOG where it is used" |
Zuul <z****l@r****g>
Committed by: Gerrit Code Review <r****w@o****g> |
9 months ago |