)]}'
{"releasenotes/notes/bp-password-expires-validation-4b32fe7032595932.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint password-expires-validation \u003chttps://blueprints.launchpad.net/keystone/+spec/password-expires-validation\u003e`_]"},{"line_number":5,"context_line":"    Token responses will now have a ``password_expires_at`` field under the"},{"line_number":6,"context_line":"    ``user`` dictionary. If PCI support is enabled, the ``password_expires_at``"},{"line_number":7,"context_line":"    field will be populated. Otherwise, it will default to ``None``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c8cf907d","line":5,"updated":"2017-01-27 13:00:24.000000000","message":"s/under/in/\n\nI also don\u0027t like the field/dictionary terminology. In JSON we have objects and properties.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint password-expires-validation \u003chttps://blueprints.launchpad.net/keystone/+spec/password-expires-validation\u003e`_]"},{"line_number":5,"context_line":"    Token responses will now have a ``password_expires_at`` field under the"},{"line_number":6,"context_line":"    ``user`` dictionary. If PCI support is enabled, the ``password_expires_at``"},{"line_number":7,"context_line":"    field will be populated. Otherwise, it will default to ``None``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_7993cc4f","line":5,"in_reply_to":"3a461143_c8cf907d","updated":"2017-01-27 14:16:11.000000000","message":"i tried to make this better, take a look at the new revision","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"7788b2f2fa25280e4e6520c9fe188580412a04b1","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint password-expires-validation \u003chttps://blueprints.launchpad.net/keystone/+spec/password-expires-validation\u003e`_]"},{"line_number":5,"context_line":"    Token responses will now have a ``password_expires_at`` field under the"},{"line_number":6,"context_line":"    ``user`` dictionary. If PCI support is enabled, the ``password_expires_at``"},{"line_number":7,"context_line":"    field will be populated. Otherwise, it will default to ``None``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_026fba2b","line":6,"range":{"start_line":6,"start_character":28,"end_line":6,"end_character":50},"updated":"2017-01-27 10:58:50.000000000","message":"PCI can be enabled without the \"password_expires_at\" setting","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint password-expires-validation \u003chttps://blueprints.launchpad.net/keystone/+spec/password-expires-validation\u003e`_]"},{"line_number":5,"context_line":"    Token responses will now have a ``password_expires_at`` field under the"},{"line_number":6,"context_line":"    ``user`` dictionary. If PCI support is enabled, the ``password_expires_at``"},{"line_number":7,"context_line":"    field will be populated. Otherwise, it will default to ``None``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_68a5bcb3","line":6,"in_reply_to":"3a461143_026fba2b","updated":"2017-01-27 13:00:24.000000000","message":"++","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint password-expires-validation \u003chttps://blueprints.launchpad.net/keystone/+spec/password-expires-validation\u003e`_]"},{"line_number":5,"context_line":"    Token responses will now have a ``password_expires_at`` field under the"},{"line_number":6,"context_line":"    ``user`` dictionary. If PCI support is enabled, the ``password_expires_at``"},{"line_number":7,"context_line":"    field will be populated. Otherwise, it will default to ``None``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_59de1012","line":6,"range":{"start_line":6,"start_character":28,"end_line":6,"end_character":50},"in_reply_to":"3a461143_026fba2b","updated":"2017-01-27 14:16:11.000000000","message":"there is no \"password_expires_at\" setting, that is the new content in the token respnse, guess that is not clear, let me try to make it better.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bp-pci-dss-password-requirements-api-87bc724b2aa554f7.yaml":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"7788b2f2fa25280e4e6520c9fe188580412a04b1","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint pci-dss-password-requirements-api \u003chttps://blueprints.launchpad.net/keystone/+spec/pci-dss-password-requirements-api\u003e`_]"},{"line_number":5,"context_line":"    Added a new API (``/v3/domains/{domain_id}/config/security_compliance``) to"},{"line_number":6,"context_line":"    retrieve regular expression requirements for passwords, should a deployment"},{"line_number":7,"context_line":"    have PCI enabled. Specifically, ``[security_compliance] password_regex`` and"},{"line_number":8,"context_line":"    ``[security_compliance] password_regex_description`` will be returned."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_82ef2a86","line":7,"range":{"start_line":6,"start_character":60,"end_line":7,"end_character":20},"updated":"2017-01-27 10:58:50.000000000","message":"same as the previous comment, PCI have lots of settings that can be independently enabled.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint pci-dss-password-requirements-api \u003chttps://blueprints.launchpad.net/keystone/+spec/pci-dss-password-requirements-api\u003e`_]"},{"line_number":5,"context_line":"    Added a new API (``/v3/domains/{domain_id}/config/security_compliance``) to"},{"line_number":6,"context_line":"    retrieve regular expression requirements for passwords, should a deployment"},{"line_number":7,"context_line":"    have PCI enabled. Specifically, ``[security_compliance] password_regex`` and"},{"line_number":8,"context_line":"    ``[security_compliance] password_regex_description`` will be returned."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_9936b850","line":7,"range":{"start_line":6,"start_character":60,"end_line":7,"end_character":20},"in_reply_to":"3a461143_82ef2a86","updated":"2017-01-27 14:16:11.000000000","message":"updated this a bit","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bp-shadow-mapping-06fc7c71a401d707.yaml":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"7788b2f2fa25280e4e6520c9fe188580412a04b1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"3a461143_02797ac8","updated":"2017-01-27 10:58:50.000000000","message":"not related: I was hoping to have a functional tests for this before we claiming support. I remember Lance was working on them, though.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"b635c0554fe8ace64c224807b88308a968f94636","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint manage-migration \u003chttps://blueprints.launchpad.net/keystone/+spec/manage-migration\u003e`_]"},{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_779cbec0","line":6,"range":{"start_line":6,"start_character":28,"end_line":6,"end_character":38},"updated":"2017-01-27 11:18:34.000000000","message":"It could be good to explicitly mention `projects` and `role assignments`","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint manage-migration \u003chttps://blueprints.launchpad.net/keystone/+spec/manage-migration\u003e`_]"},{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_88b108e4","line":6,"updated":"2017-01-27 13:00:24.000000000","message":"Should \u0027federated users\u0027 be in ``?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint manage-migration \u003chttps://blueprints.launchpad.net/keystone/+spec/manage-migration\u003e`_]"},{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_9984f8d4","line":6,"range":{"start_line":6,"start_character":28,"end_line":6,"end_character":38},"in_reply_to":"3a461143_779cbec0","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`blueprint manage-migration \u003chttps://blueprints.launchpad.net/keystone/+spec/manage-migration\u003e`_]"},{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_797d8ce6","line":6,"in_reply_to":"3a461143_88b108e4","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"},{"line_number":10,"context_line":"    rules section of a mapping. For more information see:"},{"line_number":11,"context_line":"    `mapping combinations \u003chttp://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations\u003e`_"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_28c1f42e","line":8,"updated":"2017-01-27 13:00:24.000000000","message":"Should \u0027identity provider\u0027 be in ``?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"    The federated identity mapping engine now supports the ability to"},{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"},{"line_number":10,"context_line":"    rules section of a mapping. For more information see:"},{"line_number":11,"context_line":"    `mapping combinations \u003chttp://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations\u003e`_"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_597a90f2","line":8,"in_reply_to":"3a461143_28c1f42e","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"},{"line_number":10,"context_line":"    rules section of a mapping. For more information see:"},{"line_number":11,"context_line":"    `mapping combinations \u003chttp://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations\u003e`_"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_e8f44c88","line":9,"updated":"2017-01-27 13:00:24.000000000","message":"s/done/triggered/ or something else","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":6,"context_line":"    automatically provision `projects` for `federated users`. If the project"},{"line_number":7,"context_line":"    specified within the mapping does not exist, it will be automatically"},{"line_number":8,"context_line":"    created in the `domain` associated with the `identity provider`."},{"line_number":9,"context_line":"    This behavior can be done using a specific syntax within the ``local``"},{"line_number":10,"context_line":"    rules section of a mapping. For more information see:"},{"line_number":11,"context_line":"    `mapping combinations \u003chttp://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations\u003e`_"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_d96e802e","line":9,"in_reply_to":"3a461143_e8f44c88","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"7f1578560e028d995feb8a163da3438a1a34ff7b","unresolved":false,"context_lines":[{"line_number":6,"context_line":"    automatically provision ``projects`` for ``federated users``. A role assignment"},{"line_number":7,"context_line":"    will automatically be created for the user on the specificed proejct. If the"},{"line_number":8,"context_line":"    project specified within the mapping does not exist, it will be automatically"},{"line_number":9,"context_line":"    created in the ``domain`` associated with the ``identity provider`.`"},{"line_number":10,"context_line":"    This behavior can be triggered using a specific syntax within the ``local``"},{"line_number":11,"context_line":"    rules section of a mapping. For more information see:"},{"line_number":12,"context_line":"    `mapping combinations \u003chttp://docs.openstack.org/developer/keystone/federation/federated_identity.html#mapping-combinations\u003e`_"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3a461143_da3bcf36","line":9,"range":{"start_line":9,"start_character":70,"end_line":9,"end_character":72},"updated":"2017-01-27 14:36:40.000000000","message":"backstick is after the comma :(","commit_id":"31e08fb16e6db39763538401022c5b65bb71362f"}],"releasenotes/notes/bug-1017606-98313bb4c1edf250.yaml":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":6,"context_line":"    ``keystone.catalog.backends.base.CatalogDriverBase`` have been updated."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"    Third-party extensions that extend the abstract class"},{"line_number":9,"context_line":"    (``CatalogDriverBase``) should update their code according to the new"},{"line_number":10,"context_line":"    parameter names."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"    The method signatures have changed from::"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_397ea4ae","line":9,"range":{"start_line":9,"start_character":35,"end_line":9,"end_character":52},"updated":"2017-01-27 14:16:11.000000000","message":"dstanek, changed the wording here","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1524030-ccff6b0ec9d1cbf2.yaml":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    has been updated."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"    Third-party extensions that extend the abstract class (``RevokeDriverBase``)"},{"line_number":15,"context_line":"    should update their code according to the new parameter names."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"    The method signature has changed from::"},{"line_number":18,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_996eb8ff","line":15,"range":{"start_line":15,"start_character":4,"end_line":15,"end_character":28},"updated":"2017-01-27 14:16:11.000000000","message":"dstanek, i changed the wording here too","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1561054-dbe88b552a936a05.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":13,"context_line":"    This ensures that each keystone node will be able to validate tokens issued"},{"line_number":14,"context_line":"    across the deployment. If you do not wish to switch token formats, you will"},{"line_number":15,"context_line":"    need to explicitly set the token provider for each node in the deployment"},{"line_number":16,"context_line":"    by setting ``[token] provider`` to ``UUID`` in ``keystone.conf``."},{"line_number":17,"context_line":"    Documentation can be found at `keystone-manage \u003chttp://docs.openstack.org/developer/keystone/man/keystone-manage.html\u003e`_."},{"line_number":18,"context_line":"critical:"},{"line_number":19,"context_line":"  - \u003e"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_08319805","line":16,"updated":"2017-01-27 13:00:24.000000000","message":"I think this should be uuid and not UUID.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":13,"context_line":"    This ensures that each keystone node will be able to validate tokens issued"},{"line_number":14,"context_line":"    across the deployment. If you do not wish to switch token formats, you will"},{"line_number":15,"context_line":"    need to explicitly set the token provider for each node in the deployment"},{"line_number":16,"context_line":"    by setting ``[token] provider`` to ``UUID`` in ``keystone.conf``."},{"line_number":17,"context_line":"    Documentation can be found at `keystone-manage \u003chttp://docs.openstack.org/developer/keystone/man/keystone-manage.html\u003e`_."},{"line_number":18,"context_line":"critical:"},{"line_number":19,"context_line":"  - \u003e"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_5961b038","line":16,"in_reply_to":"3a461143_08319805","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":14,"context_line":"    across the deployment. If you do not wish to switch token formats, you will"},{"line_number":15,"context_line":"    need to explicitly set the token provider for each node in the deployment"},{"line_number":16,"context_line":"    by setting ``[token] provider`` to ``UUID`` in ``keystone.conf``."},{"line_number":17,"context_line":"    Documentation can be found at `keystone-manage \u003chttp://docs.openstack.org/developer/keystone/man/keystone-manage.html\u003e`_."},{"line_number":18,"context_line":"critical:"},{"line_number":19,"context_line":"  - \u003e"},{"line_number":20,"context_line":"    [`bug 1561054 \u003chttps://bugs.launchpad.net/keystone/+bug/1561054\u003e`_]"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_a83fa4d4","line":17,"updated":"2017-01-27 13:00:24.000000000","message":"This doesn\u0027t seem like the correct link. Is http://docs.openstack.org/developer/keystone/configuration.html#encryption-keys-for-fernet-tokens better?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":14,"context_line":"    across the deployment. If you do not wish to switch token formats, you will"},{"line_number":15,"context_line":"    need to explicitly set the token provider for each node in the deployment"},{"line_number":16,"context_line":"    by setting ``[token] provider`` to ``UUID`` in ``keystone.conf``."},{"line_number":17,"context_line":"    Documentation can be found at `keystone-manage \u003chttp://docs.openstack.org/developer/keystone/man/keystone-manage.html\u003e`_."},{"line_number":18,"context_line":"critical:"},{"line_number":19,"context_line":"  - \u003e"},{"line_number":20,"context_line":"    [`bug 1561054 \u003chttps://bugs.launchpad.net/keystone/+bug/1561054\u003e`_]"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_99d238d1","line":17,"in_reply_to":"3a461143_a83fa4d4","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1622310-c501cf77437fdfa6.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    A new method ``delete_trusts_for_project`` has been added to ``keystone.trust.backends.base.TrustDriverBase``."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    Third-party extensions that extend the abstract class"},{"line_number":14,"context_line":"    (``TrustDriverBase``) should update their code according to the new"},{"line_number":15,"context_line":"    parameter names."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"    The signature for the new method is::"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_63279db6","line":14,"updated":"2017-01-27 13:00:24.000000000","message":"s/update their code/be updated/ - code doesn\u0027t update itself...yet","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":11,"context_line":"    A new method ``delete_trusts_for_project`` has been added to ``keystone.trust.backends.base.TrustDriverBase``."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    Third-party extensions that extend the abstract class"},{"line_number":14,"context_line":"    (``TrustDriverBase``) should update their code according to the new"},{"line_number":15,"context_line":"    parameter names."},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"    The signature for the new method is::"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_99b79885","line":14,"in_reply_to":"3a461143_63279db6","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1641645-516709f9da3de26f.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    [`bug 1641645 \u003chttps://bugs.launchpad.net/keystone/+bug/1641645\u003e`_]"},{"line_number":5,"context_line":"    Removes RBAC protection from the `Self-service change user password` API"},{"line_number":6,"context_line":"    (``/v3/user/$user_id/password``). A user is expected to know their own"},{"line_number":7,"context_line":"    password and can be authenticated as such. This change is related to"},{"line_number":8,"context_line":"    PCI-DSS features and allows a user with an expired password to change it"},{"line_number":9,"context_line":"    without the need of an administrator."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c3ce91b3","line":6,"updated":"2017-01-27 13:00:24.000000000","message":"I\u0027m not sure that the sentences here makes sense. Really something in here should say something like \u0027A user can present their existing password and new password without a token to change their password.\u0027","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    [`bug 1641645 \u003chttps://bugs.launchpad.net/keystone/+bug/1641645\u003e`_]"},{"line_number":5,"context_line":"    Removes RBAC protection from the `Self-service change user password` API"},{"line_number":6,"context_line":"    (``/v3/user/$user_id/password``). A user is expected to know their own"},{"line_number":7,"context_line":"    password and can be authenticated as such. This change is related to"},{"line_number":8,"context_line":"    PCI-DSS features and allows a user with an expired password to change it"},{"line_number":9,"context_line":"    without the need of an administrator."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_195ac84f","line":6,"in_reply_to":"3a461143_c3ce91b3","updated":"2017-01-27 14:16:11.000000000","message":"yeah, the \"expected to know\" part doesn\u0027t make sense","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1641654-8630ce7bcde43a7e.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`bug 1641654 \u003chttps://bugs.launchpad.net/keystone/+bug/1641654\u003e`_]"},{"line_number":5,"context_line":"    The `healthcheck` middleware from `oslo.middleware` has been added to the"},{"line_number":6,"context_line":"    keystone application pipelines by default. This middleware provides a common"},{"line_number":7,"context_line":"    method to check the health of a particular application provided by keystone."},{"line_number":8,"context_line":"    Refer to the example application pipeline provided ``keystone-paste.ini``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c345b117","line":7,"updated":"2017-01-27 13:00:24.000000000","message":"What is \u0027a particular application provided by keystone\u0027?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`bug 1641654 \u003chttps://bugs.launchpad.net/keystone/+bug/1641654\u003e`_]"},{"line_number":5,"context_line":"    The `healthcheck` middleware from `oslo.middleware` has been added to the"},{"line_number":6,"context_line":"    keystone application pipelines by default. This middleware provides a common"},{"line_number":7,"context_line":"    method to check the health of a particular application provided by keystone."},{"line_number":8,"context_line":"    Refer to the example application pipeline provided ``keystone-paste.ini``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_1431ad05","line":7,"in_reply_to":"3a461143_c345b117","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1642348-83d4c86ad3984d75.yaml":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"b635c0554fe8ace64c224807b88308a968f94636","unresolved":false,"context_lines":[{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1642348 \u003chttps://bugs.launchpad.net/keystone/+bug/1642348\u003e`_]"},{"line_number":5,"context_line":"    Added new option ``[security_compliance] lockout_ignored_user_ids`` to allow"},{"line_number":6,"context_line":"    deployers to specify users that are expempt from PCI lockout rules."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_4f272ab6","line":5,"range":{"start_line":5,"start_character":45,"end_line":5,"end_character":69},"updated":"2017-01-27 11:18:34.000000000","message":"hmm since this option was also added this cycle, do we really need to deprecate it in favor of in-code configs ? can\u0027t we just replace since it\u0027s been no major version with it ?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1642348 \u003chttps://bugs.launchpad.net/keystone/+bug/1642348\u003e`_]"},{"line_number":5,"context_line":"    Added new option ``[security_compliance] lockout_ignored_user_ids`` to allow"},{"line_number":6,"context_line":"    deployers to specify users that are expempt from PCI lockout rules."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_b45e1974","line":5,"range":{"start_line":5,"start_character":45,"end_line":5,"end_character":69},"in_reply_to":"3a461143_4f272ab6","updated":"2017-01-27 14:16:11.000000000","message":"yes, we can do that, i\u0027m writing the notes for what is available today thought, in case we don\u0027t merge that change.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1642348 \u003chttps://bugs.launchpad.net/keystone/+bug/1642348\u003e`_]"},{"line_number":5,"context_line":"    Added new option ``[security_compliance] lockout_ignored_user_ids`` to allow"},{"line_number":6,"context_line":"    deployers to specify users that are expempt from PCI lockout rules."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c3b851e8","line":6,"updated":"2017-01-27 13:00:24.000000000","message":"exempt","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"  - \u003e"},{"line_number":4,"context_line":"    [`bug 1642348 \u003chttps://bugs.launchpad.net/keystone/+bug/1642348\u003e`_]"},{"line_number":5,"context_line":"    Added new option ``[security_compliance] lockout_ignored_user_ids`` to allow"},{"line_number":6,"context_line":"    deployers to specify users that are expempt from PCI lockout rules."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_344b09b2","line":6,"in_reply_to":"3a461143_c3b851e8","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1642687-5497fb56fe86806d.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    [`bug 1642687 \u003chttps://bugs.launchpad.net/keystone/+bug/1642687\u003e`_]"},{"line_number":13,"context_line":"    Upon a successful upgrade, all existing Identity Providers (IdPs) will now"},{"line_number":14,"context_line":"    be associated with a domain. Each IdP will now have a ``domain_id`` field."},{"line_number":15,"context_line":"    The new domain ``id`` will be a random UUID, its ``name`` will match"},{"line_number":16,"context_line":"    the IdP ``id``, and it will be ``enabled`` by default."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c39db15a","line":15,"updated":"2017-01-27 13:00:24.000000000","message":"This is only true if a domain is not provided as stated in the fixes section.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":12,"context_line":"    [`bug 1642687 \u003chttps://bugs.launchpad.net/keystone/+bug/1642687\u003e`_]"},{"line_number":13,"context_line":"    Upon a successful upgrade, all existing Identity Providers (IdPs) will now"},{"line_number":14,"context_line":"    be associated with a domain. Each IdP will now have a ``domain_id`` field."},{"line_number":15,"context_line":"    The new domain ``id`` will be a random UUID, its ``name`` will match"},{"line_number":16,"context_line":"    the IdP ``id``, and it will be ``enabled`` by default."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_94e83db6","line":15,"in_reply_to":"3a461143_c39db15a","updated":"2017-01-27 14:16:11.000000000","message":"this is why its in the upgrade section","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1642687-c7ab1c9be152db20.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    updated."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"    Third-party extensions that extend the abstract class"},{"line_number":10,"context_line":"    (``ShadowUsersDriverBase``) should update their code according to the new"},{"line_number":11,"context_line":"    parameter names."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    The method signature has changed from::"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_63131db9","line":10,"updated":"2017-01-27 13:00:24.000000000","message":"Again...this must some advanced code to rewrite itself :-P","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    updated."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"    Third-party extensions that extend the abstract class"},{"line_number":10,"context_line":"    (``ShadowUsersDriverBase``) should update their code according to the new"},{"line_number":11,"context_line":"    parameter names."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"    The method signature has changed from::"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_b4b459d1","line":10,"in_reply_to":"3a461143_63131db9","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":20,"context_line":"fixes:"},{"line_number":21,"context_line":"  - |"},{"line_number":22,"context_line":"    [`bug 1642687 \u003chttps://bugs.launchpad.net/keystone/+bug/1642687\u003e`_]"},{"line_number":23,"context_line":"    Users that authenticate with an Identity Provider (IdP) will now have a"},{"line_number":24,"context_line":"    ``domain_id`` attribute, that is associated with the IdP that was used."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_c3a3f14d","line":23,"updated":"2017-01-27 13:00:24.000000000","message":"Other notes in here use `identity provides` and i think one just said identity provider. We should come up with a style guide of sorts to make it consistent.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":20,"context_line":"fixes:"},{"line_number":21,"context_line":"  - |"},{"line_number":22,"context_line":"    [`bug 1642687 \u003chttps://bugs.launchpad.net/keystone/+bug/1642687\u003e`_]"},{"line_number":23,"context_line":"    Users that authenticate with an Identity Provider (IdP) will now have a"},{"line_number":24,"context_line":"    ``domain_id`` attribute, that is associated with the IdP that was used."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_d4cba551","line":23,"in_reply_to":"3a461143_c3a3f14d","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/bug-1642692-d669c8fcf9e171d9.yaml":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":2,"context_line":"fixes:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    [`bug 1642692 \u003chttps://bugs.launchpad.net/keystone/+bug/1642692\u003e`_]"},{"line_number":5,"context_line":"    When a `federation protocol` is deleted, all users that authenticated with"},{"line_number":6,"context_line":"    the `federation protocol` will also be deleted."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_6364fd21","line":5,"updated":"2017-01-27 13:00:24.000000000","message":"This seems pretty harsh","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":2,"context_line":"fixes:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    [`bug 1642692 \u003chttps://bugs.launchpad.net/keystone/+bug/1642692\u003e`_]"},{"line_number":5,"context_line":"    When a `federation protocol` is deleted, all users that authenticated with"},{"line_number":6,"context_line":"    the `federation protocol` will also be deleted."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_54d4151f","line":5,"in_reply_to":"3a461143_6364fd21","updated":"2017-01-27 14:16:11.000000000","message":"that\u0027s what it does","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}],"releasenotes/notes/removed-as-of-ocata-436bb4b839e74494.yaml":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"b635c0554fe8ace64c224807b88308a968f94636","unresolved":false,"context_lines":[{"line_number":41,"context_line":"      * ``keystone/common/cache/backends/noop``"},{"line_number":42,"context_line":"  - \u003e"},{"line_number":43,"context_line":"    Several token validation methods were removed (see below) in favor of a"},{"line_number":44,"context_line":"    single method to validate tokens (``validate_token``). If using a custom token"},{"line_number":45,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"      * ``validate_v2_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_2f8d7e7b","line":44,"range":{"start_line":44,"start_character":40,"end_line":44,"end_character":54},"updated":"2017-01-27 11:18:34.000000000","message":"if would be worth it to mention the signature of this method","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":41,"context_line":"      * ``keystone/common/cache/backends/noop``"},{"line_number":42,"context_line":"  - \u003e"},{"line_number":43,"context_line":"    Several token validation methods were removed (see below) in favor of a"},{"line_number":44,"context_line":"    single method to validate tokens (``validate_token``). If using a custom token"},{"line_number":45,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"      * ``validate_v2_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_14e9ad14","line":44,"range":{"start_line":44,"start_character":40,"end_line":44,"end_character":54},"in_reply_to":"3a461143_2f8d7e7b","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":42,"context_line":"  - \u003e"},{"line_number":43,"context_line":"    Several token validation methods were removed (see below) in favor of a"},{"line_number":44,"context_line":"    single method to validate tokens (``validate_token``). If using a custom token"},{"line_number":45,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"      * ``validate_v2_token``"},{"line_number":48,"context_line":"      * ``validate_v3_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_833569f8","line":45,"updated":"2017-01-27 13:00:24.000000000","message":"update","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":42,"context_line":"  - \u003e"},{"line_number":43,"context_line":"    Several token validation methods were removed (see below) in favor of a"},{"line_number":44,"context_line":"    single method to validate tokens (``validate_token``). If using a custom token"},{"line_number":45,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"      * ``validate_v2_token``"},{"line_number":48,"context_line":"      * ``validate_v3_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_34e4e939","line":45,"in_reply_to":"3a461143_833569f8","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"b635c0554fe8ace64c224807b88308a968f94636","unresolved":false,"context_lines":[{"line_number":48,"context_line":"      * ``validate_v3_token``"},{"line_number":49,"context_line":"      * ``validate_non_persistent_token``"},{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_0fe9a214","line":51,"range":{"start_line":51,"start_character":18,"end_line":51,"end_character":27},"updated":"2017-01-27 11:18:34.000000000","message":"(nit) issuance","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":48,"context_line":"      * ``validate_v3_token``"},{"line_number":49,"context_line":"      * ``validate_non_persistent_token``"},{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_b4ce19b2","line":51,"range":{"start_line":51,"start_character":18,"end_line":51,"end_character":27},"in_reply_to":"3a461143_0fe9a214","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"b635c0554fe8ace64c224807b88308a968f94636","unresolved":false,"context_lines":[{"line_number":49,"context_line":"      * ``validate_non_persistent_token``"},{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"      * ``issue_v2_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_0fc0c27a","line":52,"range":{"start_line":52,"start_character":37,"end_line":52,"end_character":48},"updated":"2017-01-27 11:18:34.000000000","message":"same here, would be nice to have the method\u0027s signature described","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":49,"context_line":"      * ``validate_non_persistent_token``"},{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"      * ``issue_v2_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_94cbdda4","line":52,"range":{"start_line":52,"start_character":37,"end_line":52,"end_character":48},"in_reply_to":"3a461143_0fc0c27a","updated":"2017-01-27 14:16:11.000000000","message":"I can\u0027t fit the signature nicely in a bullet... it\u0027s too long: \n\nissue_token(self, user_id, method_names, expires_at\u003dNone,\n                    project_id\u003dNone, domain_id\u003dNone, auth_context\u003dNone,\n                    trust\u003dNone, include_catalog\u003dTrue, parent_audit_id\u003dNone)\n\nI kept it for the validate_token, since it was only 1 argument, let me know if you prefer i remove it there","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"      * ``issue_v2_token``"},{"line_number":56,"context_line":"      * ``issue_v3_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_e3262dcd","line":53,"updated":"2017-01-27 13:00:24.000000000","message":"update","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"bfe5229b225099ec5e967207acf0cd559cb42be0","unresolved":false,"context_lines":[{"line_number":50,"context_line":"  - \u003e"},{"line_number":51,"context_line":"    Several token issueance methods were removed (see below) in favor of a"},{"line_number":52,"context_line":"    single method to issue tokens (``issue_token``). If using a custom token"},{"line_number":53,"context_line":"    provider, updated the custom provider accordingly."},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"      * ``issue_v2_token``"},{"line_number":56,"context_line":"      * ``issue_v3_token``"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_74d4b146","line":53,"in_reply_to":"3a461143_e3262dcd","updated":"2017-01-27 14:16:11.000000000","message":"Done","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":79,"context_line":"    ``build_auth_context`` in the paste pipelines, otherwise remove the"},{"line_number":80,"context_line":"    ``admin_token_auth`` middleware from ``keystone-paste.ini`` entirely."},{"line_number":81,"context_line":"  - \u003e"},{"line_number":82,"context_line":"    The ``[assignment] driver`` now defaults to ``sql``. Logic to"},{"line_number":83,"context_line":"    determine the default assignment driver if one wasn\u0027t supplied through"},{"line_number":84,"context_line":"    configuration has been removed. Keystone only supports one assignment"},{"line_number":85,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_831c8978","line":82,"updated":"2017-01-27 13:00:24.000000000","message":"Why remove this?","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"3012398a21771d5025386ab46b81b55cb3b5af74","unresolved":false,"context_lines":[{"line_number":79,"context_line":"    ``build_auth_context`` in the paste pipelines, otherwise remove the"},{"line_number":80,"context_line":"    ``admin_token_auth`` middleware from ``keystone-paste.ini`` entirely."},{"line_number":81,"context_line":"  - \u003e"},{"line_number":82,"context_line":"    The ``[assignment] driver`` now defaults to ``sql``. Logic to"},{"line_number":83,"context_line":"    determine the default assignment driver if one wasn\u0027t supplied through"},{"line_number":84,"context_line":"    configuration has been removed. Keystone only supports one assignment"},{"line_number":85,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_de5f463f","line":82,"in_reply_to":"3a461143_831c8978","updated":"2017-01-27 13:25:43.000000000","message":"Ignore this, I was thinking it was something else.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"affcecc314b1516d32c5e2b4ff79c43938358370","unresolved":false,"context_lines":[{"line_number":85,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"},{"line_number":86,"context_line":"    assignment driver."},{"line_number":87,"context_line":"  - \u003e"},{"line_number":88,"context_line":"    The ``[resource] driver`` now defaults to ``sql``. Logic to"},{"line_number":89,"context_line":"    determine the default resource driver if one wasn\u0027t supplied through"},{"line_number":90,"context_line":"    configuration has been removed. Keystone only supports one resource"},{"line_number":91,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_a3134565","line":88,"updated":"2017-01-27 13:00:24.000000000","message":"or this.","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"3012398a21771d5025386ab46b81b55cb3b5af74","unresolved":false,"context_lines":[{"line_number":85,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"},{"line_number":86,"context_line":"    assignment driver."},{"line_number":87,"context_line":"  - \u003e"},{"line_number":88,"context_line":"    The ``[resource] driver`` now defaults to ``sql``. Logic to"},{"line_number":89,"context_line":"    determine the default resource driver if one wasn\u0027t supplied through"},{"line_number":90,"context_line":"    configuration has been removed. Keystone only supports one resource"},{"line_number":91,"context_line":"    driver and it shouldn\u0027t be changed unless you\u0027re deploying a custom"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"3a461143_1e5aae4f","line":88,"in_reply_to":"3a461143_a3134565","updated":"2017-01-27 13:25:43.000000000","message":"Same here","commit_id":"929c167171aae046f197e6c6d5b4b6b5f7dbdf83"}]}