)]}'
{"keystone/conf/token.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"94dca1005d87d9dcc3baee5d570caed316bd5d65","unresolved":false,"context_lines":[{"line_number":69,"context_line":"`keystone-manage fernet_setup` (also see the `keystone-manage fernet_rotate`"},{"line_number":70,"context_line":"command). `pki` and `pkiz` tokens can be validated offline, without making HTTP"},{"line_number":71,"context_line":"calls to keystone, but require that certificates be installed and distributed"},{"line_number":72,"context_line":"to facility signing tokens and later validating those signatures."},{"line_number":73,"context_line":"\"\"\"))"},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"driver \u003d cfg.StrOpt("}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_c6d43121","line":72,"updated":"2016-07-13 16:20:22.000000000","message":"facility? or facilitate?","commit_id":"7cf222e95e04ac1909552fd7070a48f381aca1a1"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"d7d1a3dc710a2c1eaf833eb2973d9aff4cf02e88","unresolved":false,"context_lines":[{"line_number":69,"context_line":"`keystone-manage fernet_setup` (also see the `keystone-manage fernet_rotate`"},{"line_number":70,"context_line":"command). `pki` and `pkiz` tokens can be validated offline, without making HTTP"},{"line_number":71,"context_line":"calls to keystone, but require that certificates be installed and distributed"},{"line_number":72,"context_line":"to facility signing tokens and later validating those signatures."},{"line_number":73,"context_line":"\"\"\"))"},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"driver \u003d cfg.StrOpt("}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_9a8a7119","line":72,"in_reply_to":"1aa78d24_c6d43121","updated":"2016-07-13 19:30:21.000000000","message":"Definitely facilitate","commit_id":"7cf222e95e04ac1909552fd7070a48f381aca1a1"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"94dca1005d87d9dcc3baee5d570caed316bd5d65","unresolved":false,"context_lines":[{"line_number":108,"context_line":"This toggles support for revoking individual tokens by the token identifier and"},{"line_number":109,"context_line":"thus various token enumeration operations (such as listing all tokens issued to"},{"line_number":110,"context_line":"a specific user). These operations are used to determine the list of tokens to"},{"line_number":111,"context_line":"consider revoked. Do not disable this option if you\u0027re using the `kvs`"},{"line_number":112,"context_line":"`[revoke] driver`."},{"line_number":113,"context_line":"\"\"\"))"},{"line_number":114,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_e6b04dde","line":111,"updated":"2016-07-13 16:20:22.000000000","message":"Is listing tokens for a use possible with the fernet provider?","commit_id":"7cf222e95e04ac1909552fd7070a48f381aca1a1"},{"author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"change_message_id":"aaca3f7ff5b60716685703d73dd0d4c144ebc0c1","unresolved":false,"context_lines":[{"line_number":108,"context_line":"This toggles support for revoking individual tokens by the token identifier and"},{"line_number":109,"context_line":"thus various token enumeration operations (such as listing all tokens issued to"},{"line_number":110,"context_line":"a specific user). These operations are used to determine the list of tokens to"},{"line_number":111,"context_line":"consider revoked. Do not disable this option if you\u0027re using the `kvs`"},{"line_number":112,"context_line":"`[revoke] driver`."},{"line_number":113,"context_line":"\"\"\"))"},{"line_number":114,"context_line":""}],"source_content_type":"text/x-python","patch_set":1,"id":"1aa78d24_8074c436","line":111,"in_reply_to":"1aa78d24_e6b04dde","updated":"2016-07-13 19:40:33.000000000","message":"Adam could probably provide a more detailed answer than myself, but IIRC, this directly affects token revocation *events*, and everything else is a side effect. So yes, it applies equally to Fernet.","commit_id":"7cf222e95e04ac1909552fd7070a48f381aca1a1"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bcfaafb1bbf87dca761c4363286bcecefdff914f","unresolved":false,"context_lines":[{"line_number":47,"context_line":"    \u0027expiration\u0027,"},{"line_number":48,"context_line":"    default\u003d3600,"},{"line_number":49,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":50,"context_line":"The amount of time that a token should remain valid (in seconds). Drastically"},{"line_number":51,"context_line":"reducing this value may break \"long-running\" operations that involve multiple"},{"line_number":52,"context_line":"services to coordinate together, and will force users to authenticate with"},{"line_number":53,"context_line":"keystone more frequently. Drastically increasing this value will increase load"},{"line_number":54,"context_line":"on the `[token] driver`, as more tokens will be simultaneously valid. Keystone"},{"line_number":55,"context_line":"tokens are also bearer tokens, so a shorter duration will also reduce the"},{"line_number":56,"context_line":"potential security impact of a compromised token."},{"line_number":57,"context_line":"\"\"\"))"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"provider \u003d cfg.StrOpt("}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_a67589cd","line":56,"range":{"start_line":50,"start_character":0,"end_line":56,"end_character":49},"updated":"2016-07-14 04:22:15.000000000","message":"love it","commit_id":"b6c24de970e99e4f93a4c8ca58a7cc543b5c07e2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bcfaafb1bbf87dca761c4363286bcecefdff914f","unresolved":false,"context_lines":[{"line_number":60,"context_line":"    \u0027provider\u0027,"},{"line_number":61,"context_line":"    default\u003d\u0027uuid\u0027,"},{"line_number":62,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":63,"context_line":"Entry point for the token provider in the `keystone.token.provider` namespace."},{"line_number":64,"context_line":"The token provider controls the token construction, validation, and revocation"},{"line_number":65,"context_line":"operations. Keystone includes `fernet`, `pkiz`, `pki`, and `uuid` token"},{"line_number":66,"context_line":"providers. `uuid` tokens must be persisted (using the backend specified in the"},{"line_number":67,"context_line":"`[token] driver` option), but do not require any extra configuration or setup."},{"line_number":68,"context_line":"`fernet` tokens do not need to be persisted at all, but require that you run"},{"line_number":69,"context_line":"`keystone-manage fernet_setup` (also see the `keystone-manage fernet_rotate`"},{"line_number":70,"context_line":"command). `pki` and `pkiz` tokens can be validated offline, without making HTTP"},{"line_number":71,"context_line":"calls to keystone, but require that certificates be installed and distributed"},{"line_number":72,"context_line":"to facilitate signing tokens and later validating those signatures."},{"line_number":73,"context_line":"\"\"\"))"},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"driver \u003d cfg.StrOpt("}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_2648798a","line":72,"range":{"start_line":63,"start_character":0,"end_line":72,"end_character":67},"updated":"2016-07-14 04:22:15.000000000","message":"love it","commit_id":"b6c24de970e99e4f93a4c8ca58a7cc543b5c07e2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bcfaafb1bbf87dca761c4363286bcecefdff914f","unresolved":false,"context_lines":[{"line_number":95,"context_line":"\"\"\"))"},{"line_number":96,"context_line":""},{"line_number":97,"context_line":"cache_time \u003d cfg.IntOpt("},{"line_number":98,"context_line":"    \u0027cache_time\u0027,"},{"line_number":99,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":100,"context_line":"The number of seconds to cache token creation and validation data. This has no"},{"line_number":101,"context_line":"effect unless both global and `[token] caching` are enabled."}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_262fd9a8","line":98,"range":{"start_line":98,"start_character":5,"end_line":98,"end_character":15},"updated":"2016-07-14 04:22:15.000000000","message":"no default here?","commit_id":"b6c24de970e99e4f93a4c8ca58a7cc543b5c07e2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bcfaafb1bbf87dca761c4363286bcecefdff914f","unresolved":false,"context_lines":[{"line_number":125,"context_line":"\"\"\"))"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"# This attribute only exists in Python 2.7.8+ or 3.2+"},{"line_number":128,"context_line":"hash_algorithm_choices \u003d getattr(hashlib, \u0027algorithms_guaranteed\u0027, None)"},{"line_number":129,"context_line":"hash_algorithm \u003d cfg.StrOpt("},{"line_number":130,"context_line":"    \u0027hash_algorithm\u0027,"},{"line_number":131,"context_line":"    default\u003d\u0027md5\u0027,"}],"source_content_type":"text/x-python","patch_set":2,"id":"1aa78d24_e604b119","line":128,"range":{"start_line":128,"start_character":0,"end_line":128,"end_character":72},"updated":"2016-07-14 04:22:15.000000000","message":"this gives me back a set(), i thought ``choices`` had to be a list?\n\n\u003e\u003e\u003e hashlib.algorithms_guaranteed\nset([\u0027sha1\u0027, \u0027sha224\u0027, \u0027sha384\u0027, \u0027sha256\u0027, \u0027sha512\u0027, \u0027md5\u0027])","commit_id":"b6c24de970e99e4f93a4c8ca58a7cc543b5c07e2"}]}