)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"ec701066f27c10bcf68f345c5a6aeffb68f9f38c","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Switch fernet to be the default token provider."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"My brain is fried..."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Co-Authored-By: Raildo Mascena \u003craildo@lsd.ufcg.edu.br\u003e"},{"line_number":12,"context_line":"Co-Authored-By: Adam Young \u003cayound@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"dada55a8_5fb87375","line":9,"updated":"2016-07-26 03:27:02.000000000","message":"I know this is a WIP, but...","commit_id":"5a90bec9a59388bb8190d7fdf358b8c32d57e0f9"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"ec701066f27c10bcf68f345c5a6aeffb68f9f38c","unresolved":false,"context_lines":[{"line_number":9,"context_line":"My brain is fried..."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Co-Authored-By: Raildo Mascena \u003craildo@lsd.ufcg.edu.br\u003e"},{"line_number":12,"context_line":"Co-Authored-By: Adam Young \u003cayound@redhat.com\u003e"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Change-Id: I29b22be75525aed5c50b34dc343af36c9b94c18c"},{"line_number":15,"context_line":"Depends-On: I2a5d91531c0fe5ce4f4fc26bf123b4d0428af101"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"dada55a8_ff9047ef","line":12,"range":{"start_line":12,"start_character":28,"end_line":12,"end_character":46},"updated":"2016-07-26 03:27:02.000000000","message":"that would be ayoung@","commit_id":"5a90bec9a59388bb8190d7fdf358b8c32d57e0f9"}],"doc/source/configuration.rst":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"68c7416d9e53a6bfc4e9bdc19a10cbecd0d87b69","unresolved":false,"context_lines":[{"line_number":437,"context_line":"Token Provider"},{"line_number":438,"context_line":"--------------"},{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides both UUID and"},{"line_number":442,"context_line":"PKI token providers. However, users may register their own token provider by"},{"line_number":443,"context_line":"configuring the following property."}],"source_content_type":"text/x-rst","patch_set":24,"id":"fa6399be_97b8b02c","line":440,"updated":"2016-10-17 21:40:58.000000000","message":"This was bothering me - so I decided to change it here even though it\u0027s not relevant to the change (didn\u0027t feel like it justified dedicated gate resources when it could be rolled into this change.)","commit_id":"9c76d45c17cd8019c3a353d8c07fbe97da9420c6"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"045f882acf1f3eb66ea6a9a73cadf48c1f53f1db","unresolved":false,"context_lines":[{"line_number":438,"context_line":"--------------"},{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides both UUID and"},{"line_number":442,"context_line":"PKI token providers. However, users may register their own token provider by"},{"line_number":443,"context_line":"configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":24,"id":"fa6399be_7d3bfd38","line":442,"range":{"start_line":441,"start_character":47,"end_line":442,"end_character":20},"updated":"2016-10-17 23:34:21.000000000","message":"This may be somewhat unrelated, but there\u0027s no mention of Fernet here.","commit_id":"9c76d45c17cd8019c3a353d8c07fbe97da9420c6"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"fe08a3d1923002843658cfa6692b1603ec305f9b","unresolved":false,"context_lines":[{"line_number":438,"context_line":"--------------"},{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides both UUID and"},{"line_number":442,"context_line":"PKI token providers. However, users may register their own token provider by"},{"line_number":443,"context_line":"configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":27,"id":"ba5da102_52488d5b","line":442,"range":{"start_line":441,"start_character":47,"end_line":442,"end_character":19},"updated":"2016-10-31 18:35:36.000000000","message":"This is not complete, we should mention it provides PKIz and Fernet too.","commit_id":"8af6c459413e24679dbf0c354449679dede9a169"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"9cdb6d20c21ad1a1de7ea9c7ecb6a10786de3250","unresolved":false,"context_lines":[{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides both UUID and"},{"line_number":442,"context_line":"PKI token providers. However, users may register their own token provider by"},{"line_number":443,"context_line":"configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":27,"id":"ba5da102_08024c0b","line":442,"in_reply_to":"ba5da102_52488d5b","updated":"2016-11-01 15:58:51.000000000","message":"Done","commit_id":"8af6c459413e24679dbf0c354449679dede9a169"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"8eb4c4a27fbb8effe264b51853ce31c434c484a7","unresolved":false,"context_lines":[{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides both UUID and"},{"line_number":442,"context_line":"PKI token providers. However, users may register their own token provider by"},{"line_number":443,"context_line":"configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":27,"id":"ba5da102_32315906","line":442,"in_reply_to":"ba5da102_52488d5b","updated":"2016-10-31 19:05:41.000000000","message":"We do have an entire section dedicated to explaining this below.","commit_id":"8af6c459413e24679dbf0c354449679dede9a169"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"854acf39299e0d70b81e8ca309217a62e86136ee","unresolved":false,"context_lines":[{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides UUID, Fernet,"},{"line_number":442,"context_line":"PKI, and PKIz token providers. However, users may register their own token"},{"line_number":443,"context_line":"provider by configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":28,"id":"ba5da102_238c917e","line":442,"updated":"2016-11-01 16:03:11.000000000","message":"This is only true for a short period of time. PKI* will soon be only a memory.","commit_id":"20e828e8f1a18128732c44260c5fd94bb0c43452"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"9f9a27a47296601fcf10ea78e9d42fc386fab486","unresolved":false,"context_lines":[{"line_number":439,"context_line":""},{"line_number":440,"context_line":"Keystone supports customizable token providers and it is specified in the"},{"line_number":441,"context_line":"``[token]`` section of the configuration file. Keystone provides UUID, Fernet,"},{"line_number":442,"context_line":"PKI, and PKIz token providers. However, users may register their own token"},{"line_number":443,"context_line":"provider by configuring the following property."},{"line_number":444,"context_line":""},{"line_number":445,"context_line":"* ``provider`` - token provider driver. Defaults to ``fernet``. Implemented by"}],"source_content_type":"text/x-rst","patch_set":28,"id":"ba5da102_63968940","line":442,"in_reply_to":"ba5da102_238c917e","updated":"2016-11-01 16:09:38.000000000","message":"++ I plan on picking that project up next","commit_id":"20e828e8f1a18128732c44260c5fd94bb0c43452"}],"keystone/conf/token.py":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"ec701066f27c10bcf68f345c5a6aeffb68f9f38c","unresolved":false,"context_lines":[{"line_number":58,"context_line":""},{"line_number":59,"context_line":"provider \u003d cfg.StrOpt("},{"line_number":60,"context_line":"    \u0027provider\u0027,"},{"line_number":61,"context_line":"    default\u003d\u0027fernet\u0027,"},{"line_number":62,"context_line":"    help\u003dutils.fmt(\"\"\""},{"line_number":63,"context_line":"Entry point for the token provider in the `keystone.token.provider` namespace."},{"line_number":64,"context_line":"The token provider controls the token construction, validation, and revocation"}],"source_content_type":"text/x-python","patch_set":4,"id":"dada55a8_5f6fd3fb","line":61,"updated":"2016-07-26 03:27:02.000000000","message":"I have voiced my concerns over this, and they still stand.","commit_id":"5a90bec9a59388bb8190d7fdf358b8c32d57e0f9"}],"releasenotes/notes/make-fernet-default-6fe3158fa2aa46de.yaml":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"95becb52f92bab5863d6a2d61920102f17f18e12","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"other:"},{"line_number":3,"context_line":"  - Switch the default token provider from UUID to Fernet."}],"source_content_type":"text/x-yaml","patch_set":19,"id":"9a89bdaa_a7107201","line":3,"updated":"2016-09-13 13:35:57.000000000","message":"This also needs to say that `keystone-manage fernet_setup` is required in order to upgrade.","commit_id":"984d3b188e10d2e1a68006fad519bc899b73588e"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"2362e5906cf9a0591f2bb0671ba0ef98f892fcd8","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"upgrade:"},{"line_number":3,"context_line":"  - The default token provider has switched from `uuid` to"},{"line_number":4,"context_line":"    `fernet`. This means existing deployments should ensure"}],"source_content_type":"text/x-yaml","patch_set":25,"id":"fa6399be_655eb1ea","line":1,"updated":"2016-10-19 14:41:07.000000000","message":"What is this in relation to this https://review.openstack.org/#/c/376526/ ?","commit_id":"e83140a54552e24224d2f0a06d93da74e39a1e75"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"43b818cf40c8598327a8684f0b115115f8b63120","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"upgrade:"},{"line_number":3,"context_line":"  - The default token provider has switched from `uuid` to"},{"line_number":4,"context_line":"    `fernet`. This means existing deployments should ensure"}],"source_content_type":"text/x-yaml","patch_set":25,"id":"fa6399be_05d7b5bf","line":1,"in_reply_to":"fa6399be_655eb1ea","updated":"2016-10-19 14:49:24.000000000","message":"Ah ha - good point. This can be removed. I originally wrote this when proposing this patch but later learned that we need to land the release note *before* the change (because of the other dependencies we have to resolve in grenade, tempest, and devstack). As a result, I pulled the releasenote out into it\u0027s own commit. This can be reverted.","commit_id":"e83140a54552e24224d2f0a06d93da74e39a1e75"}]}