)]}'
{"id":"openstack%2Fkeystone~996105","triplet_id":"openstack%2Fkeystone~master~I1476eff24171485952e6248b02e9072c22d48080","project":"openstack/keystone","branch":"master","attention_set":{"14250":{"account":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"last_update":"2026-07-10 17:37:34.000000000","reason":"Someone else replied on the change"}},"removed_from_attention_set":{},"hashtags":[],"change_id":"I1476eff24171485952e6248b02e9072c22d48080","subject":"Fix unsupported grant_type value reflected in OAuth2 error response","status":"NEW","created":"2026-07-06 14:38:50.000000000","updated":"2026-07-10 17:37:34.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"b9c938040eda0b5ff2a07734b072fa5b8e6860f2","_number":996105,"virtual_id_number":996105,"owner":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"tag":"autogenerated:zuul:check","value":1,"date":"2026-07-07 12:09:34.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"all":[{"value":2,"date":"2026-07-10 17:37:34.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-06 16:40:48.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-07-10 17:37:34.000000000","updated_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"reviewer":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"state":"REVIEWER"}],"messages":[{"id":"9b7241731acfe852ce7d5beb093b7c522ebaa513","tag":"autogenerated:gerrit:newWipPatchSet","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-07-06 14:38:50.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"33434db1a9d8b17387e94c3f5d2bed0d0183e979","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-07-06 14:40:34.000000000","message":"Patch Set 1:\n\nThis change is ready for review.","accounts_in_message":[],"_revision_number":1},{"id":"628d97c9a711961787f641dfb78fc2e121dbf145","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-06 16:40:48.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/7d7cf221597a40df8410da573b3f6801\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/44b6c74383c54c99be62dae38f54e5c2 : SUCCESS in 15m 03s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cd4913459548488cb75885ebe9ab7778 : SUCCESS in 4m 52s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/7fe87df5f29f44e6b7cf7ebf17bcb2f0 : SUCCESS in 12m 22s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/2750770098d742b99d023772727d9797 : SUCCESS in 10m 41s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/fc3893ae57a841a0a355395485294e51 : SUCCESS in 15m 58s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/dc54b8060f3e4f79a57471538597f8b5 : SUCCESS in 12m 34s\n- grenade https://zuul.opendev.org/t/openstack/build/d69c8e6c381d43aeba649c7f4144ed09 : SUCCESS in 1h 11m 21s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/65bd7f4b85b345ecb9d025daa8dfcfc8 : SUCCESS in 1h 56m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7c181842bf2f4b658c72ceff29031a5f : SUCCESS in 13m 06s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/a1d1eb9d176d41bfb538993a7c44b8fa : SUCCESS in 21m 16s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/de5f0ada56f440499acc6020a1a320d4 : FAILURE in 53m 50s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/291b78a8f03749a0a617040344833560 : FAILURE in 13m 24s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/bce5a37be2344f0bb4005ba59c2861ae : FAILURE in 31m 19s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/1193721cd16740159f3e70388aab1f5c : SUCCESS in 48m 14s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/a42919fe787a44d496d27da00b40cc79 : FAILURE in 52m 29s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/aa4d3112cd9243e9a7d8e56a32fe5f7a : SUCCESS in 26m 49s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/359cf997c1024d5398ae6e6cec41221e : SUCCESS in 1h 07m 39s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/b2744f2316264375889dfec2d30a5993 : FAILURE in 50m 17s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/52f281b2b54644b1add9fdf18fc04e34 : SUCCESS in 7m 08s (non-voting)\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/cleanup.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/post-logs.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":1},{"id":"10494ac0eb1586b4d1cddbb5575036fb24287ded","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-06 20:06:25.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/7d66f51a4cee4b16add95c33c0fe1699\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/929f6e840f6045c5aabdc4f5635e2561 : SUCCESS in 16m 17s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/647655143bd8421d84c44b1c675c48ce : SUCCESS in 20m 56s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/4fbbcf40df904ca8af8a439a3b08657b : SUCCESS in 29m 37s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"c6b9bbcf6d874110bad488dd42994dccc85ac47e","author":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"date":"2026-07-07 10:03:49.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"be5c266c6f29ac96aa3756394120cc0062f818b0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-07 12:09:34.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/ffa127d56d2848838aadc54d55511e94\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/5485dc9c254c44818c42a154194a02d5 : SUCCESS in 18m 38s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/537c92e09d844994adaeb6ee4fa4dd20 : SUCCESS in 5m 59s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/e8f027f2ec0e4ac6bf79901d01ecf483 : SUCCESS in 13m 38s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/2fdee21ffea0445baadec7bff16c7f1c : SUCCESS in 13m 32s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/057b31ea27194b769614d4456973f0ac : SUCCESS in 15m 51s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/fbf809dae0f04418b31f1783d7253181 : SUCCESS in 15m 08s\n- grenade https://zuul.opendev.org/t/openstack/build/6f0a40b0a6594b8c80fe21878fd9fb55 : SUCCESS in 1h 09m 09s\n- tempest-full-py3 https://zuul.opendev.org/t/openstack/build/0f0b0e764c854123839998b5581b8720 : SUCCESS in 1h 50m 52s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0da9e64852694df481639766806bc5b6 : SUCCESS in 13m 21s\n- keystoneclient-devstack-functional https://zuul.opendev.org/t/openstack/build/48f1ca3658614fc586e74f686d844abf : SUCCESS in 20m 02s (non-voting)\n- keystone-tempest https://zuul.opendev.org/t/openstack/build/6f3287e8f3a24155bcafb00a76064306 : SUCCESS in 59m 32s\n- keystone-tempest-fips https://zuul.opendev.org/t/openstack/build/3c8c1a8f4b534b10abe9364dbe0aaba8 : FAILURE in 20m 34s (non-voting)\n- keystone-tempest-federation https://zuul.opendev.org/t/openstack/build/f09d81f9ef3842c9ad056dc18eb1fd56 : FAILURE in 28m 33s (non-voting)\n- keystone-tempest-federation-k2k https://zuul.opendev.org/t/openstack/build/86734762bcc3469dae9381de374934ef : SUCCESS in 47m 18s\n- keystone-tempest-oidc-federation https://zuul.opendev.org/t/openstack/build/9e63c268998d496b9cfaa1da05aa33ca : SUCCESS in 44m 04s\n- keystone-tempest-ldap-domain-specific-driver https://zuul.opendev.org/t/openstack/build/f7898d6f842144b29cef09e7ef034ac4 : SUCCESS in 36m 09s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/48e81bde1030404ba931e2de77696f35 : SUCCESS in 1h 07m 24s\n- keystone-protection-functional https://zuul.opendev.org/t/openstack/build/55924204882646f3929181c4d0d8b567 : SUCCESS in 45m 58s\n- codegenerator-openapi-identity-tips-with-api-ref https://zuul.opendev.org/t/openstack/build/5d6b976e626a48d6ad129579c98af379 : SUCCESS in 8m 06s (non-voting)\n\nWarning:\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/cleanup.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.\n  File .ssh/known_hosts.old found in build home directory during playbook opendev.org/opendev/base-jobs/playbooks/base/post-logs.yaml for job keystone-tempest-fips.  Add to preserve-home-paths if safe, or otherwise remove.","accounts_in_message":[],"_revision_number":1},{"id":"24e0a27afb709636d9a8013f3154463ae777b303","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-07 13:51:17.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6b2debe93a7749459297270f4a26d886\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/7c70b3b913b646868894aaca390d8edd : SUCCESS in 39m 53s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/ec697a98210546ca9232acd231723c0c : SUCCESS in 23m 43s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/1a9e606ba80f4857adb854901976ef9c : TIMED_OUT in 1h 01m 15s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"b9c938040eda0b5ff2a07734b072fa5b8e6860f2","author":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"},"date":"2026-07-10 17:37:34.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"ebf63c77c4d2a7cc05cbee83998188dbb59de268","revisions":{"ebf63c77c4d2a7cc05cbee83998188dbb59de268":{"kind":"REWORK","_number":1,"created":"2026-07-06 14:38:50.000000000","uploader":{"_account_id":14250,"name":"Grzegorz Grasza","email":"xek@redhat.com","username":"xek"},"ref":"refs/changes/05/996105/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/05/996105/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/05/996105/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/05/996105/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/05/996105/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/05/996105/1"}}},"commit":{"parents":[{"commit":"4172e784581e71b468325c05f4e9023c0fefd9b5","subject":"Materialize limit backend queries in read sessions","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/4172e784581e71b468325c05f4e9023c0fefd9b5"}]}],"author":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-07-06 14:38:35.000000000","tz":120},"committer":{"name":"Grzegorz Grasza","email":"xek@redhat.com","date":"2026-07-06 14:38:35.000000000","tz":120},"subject":"Fix unsupported grant_type value reflected in OAuth2 error response","message":"Fix unsupported grant_type value reflected in OAuth2 error response\n\nThe OAuth2 token endpoint interpolated the raw client-supplied\ngrant_type value directly into the error_description field of the\nJSON error response. Any string value sent by the client was echoed\nback unsanitized, including content that could be rendered as markup\nby downstream consumers.\n\nRemove the user-supplied value from the message; the error code\nunsupported_grant_type already conveys the nature of the fault.\nThe description now reads \"The supplied grant_type value is not\nsupported.\" which is accurate without reflecting attacker input.\n\nAssisted-by: Claude Sonnet 4.6 \u003cnoreply@anthropic.com\u003e\nChange-Id: I1476eff24171485952e6248b02e9072c22d48080\nSigned-off-by: Grzegorz Grasza \u003cxek@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ebf63c77c4d2a7cc05cbee83998188dbb59de268"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/ebf63c77c4d2a7cc05cbee83998188dbb59de268"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":27900,"name":"Artem Goncharov","email":"artem.goncharov@gmail.com","username":"gtema"}},{"label":"Workflow","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}