)]}'
{"id":"openstack%2Fkeystone~724124","triplet_id":"openstack%2Fkeystone~master~Idb10267338b4204b435df233c636046a1ce5711f","project":"openstack/keystone","branch":"master","topic":"SEC-bug-1872737","hashtags":[],"change_id":"Idb10267338b4204b435df233c636046a1ce5711f","subject":"Check timestamp of signed EC2 token request","status":"MERGED","created":"2020-04-28 18:45:43.000000000","updated":"2020-04-30 20:26:18.000000000","submitted":"2020-04-30 20:22:11.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"724124-1588278132146-56a7dbf5","meta_rev_id":"828a8ff561db9747d1fb71cf40c8cbe4d3f8f4db","_number":724124,"virtual_id_number":724124,"owner":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-04-30 20:22:11.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":0,"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"all":[{"value":2,"date":"2020-04-28 23:22:57.000000000","_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-04-29 07:19:28.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":2,"date":"2020-04-29 13:04:10.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"all":[{"value":0,"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},{"value":1,"date":"2020-04-29 13:04:10.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-04-28 23:22:57.000000000","updated_by":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"reviewer":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"state":"REVIEWER"},{"updated":"2020-04-29 07:19:28.000000000","updated_by":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"reviewer":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"state":"REVIEWER"},{"updated":"2020-04-29 13:04:10.000000000","updated_by":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"reviewer":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"state":"REVIEWER"},{"updated":"2020-04-30 20:22:11.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"7b902034f71ad820e85e16244dd1b43a978b4bad","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-04-28 18:45:43.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"870e46e65c2095fe75782015fb6aebfd4b17bc49","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-28 22:06:37.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/9c7af6c17d524ad4b2f0eddf1ee969c5 : SUCCESS in 38m 33s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/663d2e96aefd4ac9bf24bbecbc4f16ef : SUCCESS in 33m 27s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/babe868e5b554ec49f8e79417aff2fc0 : SUCCESS in 8m 01s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/6c758f2157ba41b1bbba3627aa80e8c2 : SUCCESS in 26m 48s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/8123f655bfb4461bb5064f8528496fbf : SUCCESS in 20m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4908e495ff66493782902086ca0b1e3a : SUCCESS in 15m 57s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1a20e1b1ebf2490890c00708df8ddb3f : SUCCESS in 14m 39s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/055e0f847094435da5501f1c8808ab11 : SUCCESS in 1h 04m 46s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/74ba8446770148a7a7e13df455b395c3 : SUCCESS in 1h 41m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8e82069735f04d38a07644b412798e11 : SUCCESS in 20m 23s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/a9d2118f172b46af9a6babfe0ffc4f95 : SUCCESS in 31m 03s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/97c3eb1dc17743c1b17446cb73a1d240 : FAILURE in 32m 53s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/28d99509c5aa426e978d9d672c0dc5df : SUCCESS in 36m 12s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/2137d25cc77e4280a6ffe98ed9c7fce0 : SUCCESS in 20m 39s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/dbd2bcd49d1a43b28c74a7a9365549f2 : SUCCESS in 43m 29s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8a84e19f8a614ee78fbccf3fea70c4d8 : SUCCESS in 1h 12m 02s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/49c1b97cc1a04650a3a4cb4398cd6590 : SUCCESS in 49m 11s","accounts_in_message":[],"_revision_number":1},{"id":"4ec0752332db832fa3fcfa05aa942278b4568b62","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-04-28 23:22:57.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"bdc42870df7e69139d9fb4aa23cda142f50a19bd","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2020-04-29 07:19:28.000000000","message":"Patch Set 1: Code-Review+1\n\nThanks Colleen. With the very detailed commit message it got easier to understand this critical bug that can allow an intruder to do attacks since the requests are not expired because keystone wasn\u0027t used to configure/check the TTL option for the requests.","accounts_in_message":[],"_revision_number":1},{"id":"3ab7a7caa2d34daeaba4af0eda2e31198f282f2e","author":{"_account_id":16465,"name":"Kristi Nikolla","email":"knikolla@bu.edu","username":"knikolla"},"date":"2020-04-29 13:04:10.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"46fcd2bcfcb499e8dceff8f3ff56bc94e375b0ae","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-29 13:04:31.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"0ffecdb0ba0f8ae583629aad74486b27482e6415","author":{"_account_id":27621,"name":"Vishakha Agarwal","email":"agarwalvishakha18@gmail.com","username":"Vishakha"},"date":"2020-04-30 12:36:42.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"92c2d6c1afe4d1231be3e99af9b845ddadf7dbcb","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 13:55:17.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/799541f88ac94367976e3f9a69b2bc26 : SUCCESS in 32m 39s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/39f5934071c740eda9ead673b2c9f0bd : SUCCESS in 31m 08s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d5443c72b8d8447f8b0b137bbce915c6 : SUCCESS in 5m 47s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/188e3916b94b45fd97044b3e072398c5 : SUCCESS in 33m 38s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/efa6dd08da22407aafc0113cd4b1798c : SUCCESS in 23m 48s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/2e002a12df5146c2bc9106c64f1ba20a : SUCCESS in 23m 18s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/90386f9ba9ee4f6780f653680ec3df27 : SUCCESS in 13m 55s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/a0453d31172e421ea6c5b70b0e3c8566 : SUCCESS in 59m 41s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/639d419bbe71431ebdd7f2bd12b8ab3c : SUCCESS in 1h 17m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/dbe880342f484fbdbeb16c1384a17356 : SUCCESS in 15m 41s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/84ac9c5ef069400da52891d7de7c83ac : SUCCESS in 29m 30s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/c0fa0e9b05d0434b927ddad56af6ec39 : SUCCESS in 31m 36s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/dbd99a62f33c4f289ba84840eeac7cd7 : SUCCESS in 31m 56s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/bdbbd5ce0fe54b86b0554ecc7d300bb1 : SUCCESS in 14m 20s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/007ce71be37343a6afdffcff77446acb : SUCCESS in 39m 53s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2a49a5062d844901aa8375c770dba60a : SUCCESS in 57m 22s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/a4c7d75020f644a0b183822a2b4214bb : SUCCESS in 36m 48s","accounts_in_message":[],"_revision_number":1},{"id":"741a2b94a8380e3bf0a8c06989cf01478df59bbb","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 13:55:37.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"f670c4d5ea65458f9cd2d85bcc18869e5cedf747","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 15:25:27.000000000","message":"Patch Set 1: Verified-2\n\nBuild failed (gate pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/a2649a91ac544b94bde6abd4877065f2 : SUCCESS in 15m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/35ca9b9faf05474a8e564181ea2103f8 : SUCCESS in 7m 34s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/67f39e828cd242fdb8e830a65edb4c2c : SUCCESS in 22m 45s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/16b9047dc1654868bad586a9a025e1fa : SUCCESS in 24m 50s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e227051c017a4ce1bfebdf30b3709151 : SUCCESS in 15m 38s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/bbb60303f6f44929b818a5d5705a60ef : SUCCESS in 1h 11m 29s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/a41b8dcf353340279a9563deed95f82c : SUCCESS in 1h 28m 33s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/ae244b7bf45047b983b60ca2d2047a3d : SUCCESS in 16m 40s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/ec07796f0a304ed981ea0978f6b00f03 : SUCCESS in 33m 21s\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/8d542d14158044dbadafc895d4e52ee7 : FAILURE in 38m 35s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/6b4ad899fc8240fcbe652a0fee4c6ae4 : SUCCESS in 1h 05m 40s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/ba7defb6b5e049d287a0777dfb11695e : SUCCESS in 39m 19s","accounts_in_message":[],"_revision_number":1},{"id":"ce9cbac843e3d6056be92533d7187969296d2c49","author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"date":"2020-04-30 15:26:05.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"a9f2e0aaf9be96e1466966f0b9b00b9d1cf62a98","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 16:59:34.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c1945f5304f840409df5e08c4b5264c8 : SUCCESS in 14m 49s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/18eadd9dbb4942baaee53c740040dab8 : SUCCESS in 18m 05s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9393cc6c45e94f74b3131f485e8a4d50 : SUCCESS in 7m 36s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/d7d91c139bc042b8bda75d0fa27e8016 : SUCCESS in 31m 59s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/266bd55d8e5144c1ac4c3fe918d5c99d : SUCCESS in 31m 32s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/767e554029bb487a9e6ffc05aa6f7082 : SUCCESS in 31m 57s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3f057536076444ab925a64a4a6abf47f : SUCCESS in 15m 15s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/93775e7f315d46eb88e57a9063f5ac63 : SUCCESS in 1h 00m 22s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/518c61fd197d42388f7bd50079ec4306 : SUCCESS in 1h 25m 18s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/9b0575048e2f497eaeec111f2c99440d : SUCCESS in 21m 40s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/5d6d6ae762444ce8ad32f1ac0b2baaf6 : SUCCESS in 40m 58s\n- keystone-dsvm-py3-functional-federation-opensuse15 https://zuul.opendev.org/t/openstack/build/76ff3b841e1142c58781e17c60f50f06 : SUCCESS in 39m 05s (non-voting)\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/5a75b0c687a14e4d8257b445e710eff6 : SUCCESS in 40m 03s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/5a8d568090a14d52a26f5f61f1f84cb0 : SUCCESS in 20m 38s (non-voting)\n- keystone-dsvm-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/473c84c0753c4dd79a57a37e57dadf6f : SUCCESS in 54m 09s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/39dc28eca8ed477bb79e36b6678b5d33 : SUCCESS in 1h 11m 13s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/b6ced88fbbf14c14911909c0c47b7dc3 : SUCCESS in 46m 36s","accounts_in_message":[],"_revision_number":1},{"id":"de76a1370839f3a7d331905b17b6384bb448cebe","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 17:00:01.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"b7f3a6438faff97b8f5006de4dadc495f874db7a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 20:22:11.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/ce2eb93c98714013a316d4835edc3444 : SUCCESS in 20m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/ed902399488140cbb1fa93c1f0718350 : SUCCESS in 7m 58s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/a689ccb9ec4b4159871c1c74edc52cdc : SUCCESS in 19m 05s\n- openstack-tox-py37 https://zuul.opendev.org/t/openstack/build/c3216a06a5ae4c908d674ad301637eda : SUCCESS in 20m 20s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/86ca5da6bd47485ba2e73c59f3699dc6 : SUCCESS in 13m 19s\n- grenade-py3 https://zuul.opendev.org/t/openstack/build/6e700a9860e84fad871b2266f8982030 : SUCCESS in 55m 44s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/05bb0d97b55c4f6f93b1a191ad680b65 : SUCCESS in 1h 16m 17s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a4235297486442c6ab5aed0a253827d2 : SUCCESS in 19m 44s\n- keystone-dsvm-py3-functional https://zuul.opendev.org/t/openstack/build/83e0d5ae09cf43e4a5e953566435c07d : SUCCESS in 37m 43s\n- keystone-dsvm-py3-functional-federation-opensuse15-k2k https://zuul.opendev.org/t/openstack/build/d79f8458c7d745d4b786bf920ad6ab0f : SUCCESS in 33m 17s\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/31817085bee741d099d0e4515be927c6 : SUCCESS in 59m 27s\n- keystone-tox-protection https://zuul.opendev.org/t/openstack/build/2117a2ea44e24b7b85bc06dd93ae36b1 : SUCCESS in 39m 22s","accounts_in_message":[],"_revision_number":1},{"id":"83ba548d4a49f5888cd1db262ee956d1a566aa99","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 20:22:12.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1},{"id":"d8516774b12c50b5d854513900ceb31d268d84ad","author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"date":"2020-04-30 20:25:13.000000000","message":"Patch Set 1: Cherry Picked\n\nThis patchset was cherry picked to branch stable/ussuri as commit 8d5becbe4b463f6a5a24a1929dd0f48dab6ae027","accounts_in_message":[],"_revision_number":1},{"id":"ed154721d0e4964ab999900d9228385541cbf710","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-04-30 20:26:18.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c00f21c3be564180aafdfcc1b53aacfb : SUCCESS in 1m 51s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/bbc10dc74bbc42278f4d6a30884ba298 : SUCCESS in 1m 29s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"ab89ea749013e7f2c46260f68504f5687763e019","revisions":{"ab89ea749013e7f2c46260f68504f5687763e019":{"kind":"REWORK","_number":1,"created":"2020-04-28 18:45:43.000000000","uploader":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"ref":"refs/changes/24/724124/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/24/724124/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/24/724124/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/24/724124/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/24/724124/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/24/724124/1"}}},"commit":{"parents":[{"commit":"77c230609bfa195b3204b6ea99d16afc0c76bac7","subject":"Imported Translations from Zanata","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/77c230609bfa195b3204b6ea99d16afc0c76bac7"}]}],"author":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-17 00:05:43.000000000","tz":-420},"committer":{"name":"Colleen Murphy","email":"colleen.murphy@suse.com","date":"2020-04-28 18:45:24.000000000","tz":-420},"subject":"Check timestamp of signed EC2 token request","message":"Check timestamp of signed EC2 token request\n\nEC2 token requests contain a signature that signs the entire request,\nincluding the access timestamp. While the signature is checked, the\ntimestamp is not, and so these signed requests remain valid\nindefinitely, leaving the token API vulnerable to replay attacks. This\nchange introduces a configurable TTL for signed token requests and\nensures that the timestamp is actually validated against it.\n\nThe check will work for either an AWS Signature v1/v2 \u0027Timestamp\u0027\nparameter[1] or the AWS Signature v4 \u0027X-Aws-Date\u0027 header or\nparameter[2].\n\nAlthough this technically adds a new feature and the default value of\nthe feature changes behavior, this change is required to protect\ncredential holders and therefore must be backported to all supported\nbranches.\n\n[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-2.html\n[2] https://docs.aws.amazon.com/general/latest/gr/sigv4-date-handling.html\n\nChange-Id: Idb10267338b4204b435df233c636046a1ce5711f\nCloses-bug: #1872737\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ab89ea749013e7f2c46260f68504f5687763e019"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ab89ea749013e7f2c46260f68504f5687763e019"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}