)]}'
{"doc/admin-guide-cloud/source/keystone_tokens.rst":[{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b4a551461b3f37fa07a10696dade68ebfa6d8f04","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Keystone Token Providers"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The keystone"},{"line_number":6,"context_line":"project supports several types of tokens. The token type issued by keystone is"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_04367bb4","line":3,"updated":"2015-11-13 01:35:30.000000000","message":"We use sentence case instead of capital case, so the titles should all read:\n\n\"Keystone token providers\"\n\"UUID tokens\"\n\"Fernet tokens\"\n\"PKI tokens\"\n\"PKIZ tokens\"\n\nThe word token has now lost all meaning.","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a8e3cd707954eab887b42bcec163694e772de04","unresolved":false,"context_lines":[{"line_number":1,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":2,"context_line":"Keystone Token Providers"},{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The keystone"},{"line_number":6,"context_line":"project supports several types of tokens. The token type issued by keystone is"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_d60b312a","line":3,"in_reply_to":"da85f559_04367bb4","updated":"2015-11-13 13:59:35.000000000","message":"Done","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b4a551461b3f37fa07a10696dade68ebfa6d8f04","unresolved":false,"context_lines":[{"line_number":19,"context_line":"~~~~~~~~~~~~~"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_e45b37f5","line":22,"updated":"2015-11-13 01:35:30.000000000","message":"do not* avoid contractions","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a8e3cd707954eab887b42bcec163694e772de04","unresolved":false,"context_lines":[{"line_number":19,"context_line":"~~~~~~~~~~~~~"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_f91c2615","line":22,"in_reply_to":"da85f559_e45b37f5","updated":"2015-11-13 13:59:35.000000000","message":"Done","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b4a551461b3f37fa07a10696dade68ebfa6d8f04","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"},{"line_number":26,"context_line":"tokens, Fernet tokens must be passed back to keystone in order to validate"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_a46e8f94","line":23,"updated":"2015-11-13 01:35:30.000000000","message":"``AES256``","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a8e3cd707954eab887b42bcec163694e772de04","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"},{"line_number":26,"context_line":"tokens, Fernet tokens must be passed back to keystone in order to validate"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_3924eead","line":23,"in_reply_to":"da85f559_a46e8f94","updated":"2015-11-13 13:59:35.000000000","message":"Done","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b4a551461b3f37fa07a10696dade68ebfa6d8f04","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"},{"line_number":26,"context_line":"tokens, Fernet tokens must be passed back to keystone in order to validate"},{"line_number":27,"context_line":"them. For more information on Fernet tokens, see the `Fernet FAQ"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_446b2386","line":24,"updated":"2015-11-13 01:35:30.000000000","message":"``SHA256 HMAC``","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a8e3cd707954eab887b42bcec163694e772de04","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they don\u0027t require any server-side persistence."},{"line_number":23,"context_line":"AES256 encryption is used to protect the information stored in the token and it"},{"line_number":24,"context_line":"is integrity verified with a SHA256 HMAC signature. Only the keystone server"},{"line_number":25,"context_line":"has access to the key used to encrypt and decrypt Fernet tokens. Like UUID"},{"line_number":26,"context_line":"tokens, Fernet tokens must be passed back to keystone in order to validate"},{"line_number":27,"context_line":"them. For more information on Fernet tokens, see the `Fernet FAQ"}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_d93922da","line":24,"in_reply_to":"da85f559_446b2386","updated":"2015-11-13 13:59:35.000000000","message":"Done","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b4a551461b3f37fa07a10696dade68ebfa6d8f04","unresolved":false,"context_lines":[{"line_number":42,"context_line":"PKIZ Tokens"},{"line_number":43,"context_line":"~~~~~~~~~~~"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"The same concepts from PKI tokens apply to PKIZ tokens. The only difference"},{"line_number":46,"context_line":"between the two is PKIZ tokens are compressed to help mitigate the size issues"},{"line_number":47,"context_line":"of PKI."},{"line_number":48,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_04b99bec","line":45,"updated":"2015-11-13 01:35:30.000000000","message":"If you\u0027re only going to say this, I\u0027m unsure if this really needs to be its own section.\nTry and write each section so they can be searched and read as standalone. I think it would be beneficial here for you to explain further what concepts are the same, and maybe why?","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a8e3cd707954eab887b42bcec163694e772de04","unresolved":false,"context_lines":[{"line_number":42,"context_line":"PKIZ Tokens"},{"line_number":43,"context_line":"~~~~~~~~~~~"},{"line_number":44,"context_line":""},{"line_number":45,"context_line":"The same concepts from PKI tokens apply to PKIZ tokens. The only difference"},{"line_number":46,"context_line":"between the two is PKIZ tokens are compressed to help mitigate the size issues"},{"line_number":47,"context_line":"of PKI."},{"line_number":48,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da85f559_599a12c7","line":45,"in_reply_to":"da85f559_04b99bec","updated":"2015-11-13 13:59:35.000000000","message":"Good, point, would it make sense to roll this into the \u0027PKI token\u0027 section above? PKIZ is a derivative of PKI, it just ends up being a smaller token.","commit_id":"0fe634db04ef3f980460150e5203777c861a2964"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"b7c0f62cf6cb1f125d60af6986c77ab2d6678f11","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The keystone"},{"line_number":6,"context_line":"project supports several types of tokens. The token type issued by keystone is"},{"line_number":7,"context_line":"configurable through keystone configuration file. The current token types"},{"line_number":8,"context_line":"supported by keystone are UUID, Fernet, PKI, and PKIZ."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"UUID tokens"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_4ce80e17","line":7,"updated":"2015-11-13 14:18:02.000000000","message":"Perhaps specify the file here? something like this:\n\n\"configurable through the :file:`etc/keystone.conf` file.\"","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f19d9e76c8b5b3350c41c655503c848bdc595f5e","unresolved":false,"context_lines":[{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The keystone"},{"line_number":6,"context_line":"project supports several types of tokens. The token type issued by keystone is"},{"line_number":7,"context_line":"configurable through keystone configuration file. The current token types"},{"line_number":8,"context_line":"supported by keystone are UUID, Fernet, PKI, and PKIZ."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"UUID tokens"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_6f30649f","line":7,"in_reply_to":"da85f559_4ce80e17","updated":"2015-11-13 14:32:46.000000000","message":"Good point, done.","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"b7c0f62cf6cb1f125d60af6986c77ab2d6678f11","unresolved":false,"context_lines":[{"line_number":19,"context_line":"~~~~~~~~~~~~~"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and it is integrity verified with a ``SHA256 HMAC`` signature. Only the"},{"line_number":25,"context_line":"keystone server has access to the key used to encrypt and decrypt Fernet"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_ac517ada","line":22,"updated":"2015-11-13 14:18:02.000000000","message":"token -\u003e tokens","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f19d9e76c8b5b3350c41c655503c848bdc595f5e","unresolved":false,"context_lines":[{"line_number":19,"context_line":"~~~~~~~~~~~~~"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and it is integrity verified with a ``SHA256 HMAC`` signature. Only the"},{"line_number":25,"context_line":"keystone server has access to the key used to encrypt and decrypt Fernet"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_6f8ce435","line":22,"in_reply_to":"da85f559_ac517ada","updated":"2015-11-13 14:32:46.000000000","message":"Done","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"b7c0f62cf6cb1f125d60af6986c77ab2d6678f11","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and it is integrity verified with a ``SHA256 HMAC`` signature. Only the"},{"line_number":25,"context_line":"keystone server has access to the key used to encrypt and decrypt Fernet"},{"line_number":26,"context_line":"tokens. Like UUID tokens, Fernet tokens must be passed back to keystone in"},{"line_number":27,"context_line":"order to validate them. For more information on Fernet tokens, see the `Fernet"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_4c048ec5","line":24,"updated":"2015-11-13 14:18:02.000000000","message":"\"...and its integrity is verified...\"","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f19d9e76c8b5b3350c41c655503c848bdc595f5e","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID token in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and it is integrity verified with a ``SHA256 HMAC`` signature. Only the"},{"line_number":25,"context_line":"keystone server has access to the key used to encrypt and decrypt Fernet"},{"line_number":26,"context_line":"tokens. Like UUID tokens, Fernet tokens must be passed back to keystone in"},{"line_number":27,"context_line":"order to validate them. For more information on Fernet tokens, see the `Fernet"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_4f87a012","line":24,"in_reply_to":"da85f559_4c048ec5","updated":"2015-11-13 14:32:46.000000000","message":"Done","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"b7c0f62cf6cb1f125d60af6986c77ab2d6678f11","unresolved":false,"context_lines":[{"line_number":30,"context_line":"page."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"PKI and PKIZ tokens"},{"line_number":33,"context_line":"~~~~~~~~~~"},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"PKI tokens are signed documents that contain the authentication context, as"},{"line_number":36,"context_line":"well as the service catalog. Given the contents of the token and the size of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_4cfece06","line":33,"updated":"2015-11-13 14:18:02.000000000","message":"The length of the underline needs to match the char length of the line above","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f19d9e76c8b5b3350c41c655503c848bdc595f5e","unresolved":false,"context_lines":[{"line_number":30,"context_line":"page."},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"PKI and PKIZ tokens"},{"line_number":33,"context_line":"~~~~~~~~~~"},{"line_number":34,"context_line":""},{"line_number":35,"context_line":"PKI tokens are signed documents that contain the authentication context, as"},{"line_number":36,"context_line":"well as the service catalog. Given the contents of the token and the size of"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_cf7b9028","line":33,"in_reply_to":"da85f559_4cfece06","updated":"2015-11-13 14:32:46.000000000","message":"Done","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":17832,"name":"Linette Williams","email":"stemke@us.ibm.com","username":"lwilliams"},"change_message_id":"443ccc5813e8a3b81cf8947dde986702e658a249","unresolved":false,"context_lines":[{"line_number":35,"context_line":"PKI tokens are signed documents that contain the authentication context, as"},{"line_number":36,"context_line":"well as the service catalog. Given the contents of the token and the size of"},{"line_number":37,"context_line":"the OpenStack deployment, these tokens can be very long. Keystone uses"},{"line_number":38,"context_line":"public/private key pairs and certificates in order to generated PKI tokens."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"The same concepts from PKI tokens apply to PKIZ tokens. The only difference"},{"line_number":41,"context_line":"between the two is PKIZ tokens are compressed to help mitigate the size issues"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_4c780ef9","line":38,"updated":"2015-11-13 14:22:08.000000000","message":"generate","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f19d9e76c8b5b3350c41c655503c848bdc595f5e","unresolved":false,"context_lines":[{"line_number":35,"context_line":"PKI tokens are signed documents that contain the authentication context, as"},{"line_number":36,"context_line":"well as the service catalog. Given the contents of the token and the size of"},{"line_number":37,"context_line":"the OpenStack deployment, these tokens can be very long. Keystone uses"},{"line_number":38,"context_line":"public/private key pairs and certificates in order to generated PKI tokens."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"The same concepts from PKI tokens apply to PKIZ tokens. The only difference"},{"line_number":41,"context_line":"between the two is PKIZ tokens are compressed to help mitigate the size issues"}],"source_content_type":"text/x-rst","patch_set":2,"id":"da85f559_ef78d42d","line":38,"in_reply_to":"da85f559_4c780ef9","updated":"2015-11-13 14:32:46.000000000","message":"Done","commit_id":"46045b6b549f4a7e1cecf077549d53207f63480d"},{"author":{"_account_id":6635,"name":"John Davidge","email":"john.davidge@rackspace.com","username":"john-davidge"},"change_message_id":"c4a7fbd1f9cab5a316424373bcc52d9ed5d1ec04","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID tokens in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and its integrity verified with a ``SHA256 HMAC`` signature. Only the keystone"},{"line_number":25,"context_line":"server has access to the key used to encrypt and decrypt Fernet tokens. Like"},{"line_number":26,"context_line":"UUID tokens, Fernet tokens must be passed back to keystone in order to validate"},{"line_number":27,"context_line":"them. For more information on Fernet tokens, see the `Fernet FAQ"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_aae63a42","line":24,"updated":"2015-11-13 14:56:29.000000000","message":"\"...integrity is verified...\"","commit_id":"57d9a38eee8b7a02bbd2ae96d56172308e66a251"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"2b1fe4e578ae5360cabffeee7f06d4c33df62509","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Fernet tokens were introduced in the OpenStack Kilo release. They differ from"},{"line_number":22,"context_line":"UUID tokens in the sense that they do not require any server-side persistence."},{"line_number":23,"context_line":"``AES256`` encryption is used to protect the information stored in the token"},{"line_number":24,"context_line":"and its integrity verified with a ``SHA256 HMAC`` signature. Only the keystone"},{"line_number":25,"context_line":"server has access to the key used to encrypt and decrypt Fernet tokens. Like"},{"line_number":26,"context_line":"UUID tokens, Fernet tokens must be passed back to keystone in order to validate"},{"line_number":27,"context_line":"them. For more information on Fernet tokens, see the `Fernet FAQ"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_fb3656e6","line":24,"in_reply_to":"da85f559_aae63a42","updated":"2015-11-13 15:25:56.000000000","message":"Sorry, I must have missed that one earlier. Good catch! Done","commit_id":"57d9a38eee8b7a02bbd2ae96d56172308e66a251"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"6be1121ec62d2f3849783e9a82e7971f04eb7f2b","unresolved":false,"context_lines":[{"line_number":25,"context_line":"server has access to the key used to encrypt and decrypt Fernet tokens. Like"},{"line_number":26,"context_line":"UUID tokens, Fernet tokens must be passed back to keystone in order to validate"},{"line_number":27,"context_line":"them. For more information on Fernet tokens, see the `Fernet FAQ"},{"line_number":28,"context_line":"\u003chttp://docs.openstack.org/admin-guide-cloud/keystone_fernet_token_faq.html\u003e`__"},{"line_number":29,"context_line":"page."},{"line_number":30,"context_line":""},{"line_number":31,"context_line":"PKI and PKIZ tokens"}],"source_content_type":"text/x-rst","patch_set":4,"id":"da85f559_9e861712","line":28,"updated":"2015-11-13 16:12:24.000000000","message":"this should be a relative in-document link - but that document does not exist yet. I suggest to remove the sentence and add it together with the Fernet FAQ patch in.","commit_id":"3a8ee5509229d334585051d528067d2336b9bfd8"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"f858988c10c2d237ba9975c50ebb4e0f2573e7e0","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The token type"},{"line_number":6,"context_line":"issued by keystone is configurable through the :file:`etc/keystone.conf` file."},{"line_number":7,"context_line":"Currently, there are four supported token types and they include UUID, Fernet,"},{"line_number":8,"context_line":"PKI, and PKIZ."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"da85f559_70403c08","line":6,"updated":"2015-11-13 17:54:18.000000000","message":"I\u0027m unsure how to go about referencing \u0027keystone\u0027 versus the \u0027Identity service\u0027. These token providers are specific to the keystone implementation of the Identity service.\n\nIs there a convention I should be following here?","commit_id":"da89b3b1cfb765f159646fc14f8b215c07a85e22"},{"author":{"_account_id":10897,"name":"Joseph Robinson","email":"josephremail@gmail.com","username":"RobiJoe"},"change_message_id":"b09e27ed3f399a12e671517d9e419bcf1df4e0f4","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The token type"},{"line_number":6,"context_line":"issued by keystone is configurable through the :file:`etc/keystone.conf` file."},{"line_number":7,"context_line":"Currently, there are four supported token types and they include UUID, Fernet,"},{"line_number":8,"context_line":"PKI, and PKIZ."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"da85f559_6a54a053","line":6,"in_reply_to":"da85f559_1415ff99","updated":"2015-11-16 03:42:05.000000000","message":"The lower case \u0027keystone\u0027 works here if the token providers are specific to the keystone implementation of the Identity service. Speaking broadly, using \u0027Identity Service\u0027 here would also fit with conventions.","commit_id":"da89b3b1cfb765f159646fc14f8b215c07a85e22"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"13293d2256545c7ece99603a43abe5e2a05d9dad","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The token type"},{"line_number":6,"context_line":"issued by keystone is configurable through the :file:`etc/keystone.conf` file."},{"line_number":7,"context_line":"Currently, there are four supported token types and they include UUID, Fernet,"},{"line_number":8,"context_line":"PKI, and PKIZ."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"ba8a016a_967cda21","line":6,"in_reply_to":"da85f559_6a54a053","updated":"2015-11-16 15:26:58.000000000","message":"Good deal, thanks for the info!","commit_id":"da89b3b1cfb765f159646fc14f8b215c07a85e22"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"004c0fa67ca92c87a96397e46251c7a3adb60361","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Tokens are used to interact with the various OpenStack APIs. The token type"},{"line_number":6,"context_line":"issued by keystone is configurable through the :file:`etc/keystone.conf` file."},{"line_number":7,"context_line":"Currently, there are four supported token types and they include UUID, Fernet,"},{"line_number":8,"context_line":"PKI, and PKIZ."},{"line_number":9,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"da85f559_1415ff99","line":6,"in_reply_to":"da85f559_70403c08","updated":"2015-11-16 01:50:25.000000000","message":"No particular convention I can think of... Like the rest of the doc you just need to identify the concept. Unless you\u0027re talking about something entirely different? \n\nhttp://docs.openstack.org/contributor-guide/writing-style/openstack-components.html","commit_id":"da89b3b1cfb765f159646fc14f8b215c07a85e22"}]}