)]}'
{"id":"openstack%2Fpuppet-keystone~712284","triplet_id":"openstack%2Fpuppet-keystone~stable%2Ftrain~I95220db87f61ca19e50c64b4f799d3973b256858","project":"openstack/puppet-keystone","branch":"stable/train","topic":"jwt_verification-stable/train","hashtags":[],"change_id":"I95220db87f61ca19e50c64b4f799d3973b256858","subject":"Add support for JWKS based OAuth Token validation.","status":"MERGED","created":"2020-03-11 08:48:09.000000000","updated":"2020-03-12 17:14:09.000000000","submitted":"2020-03-12 17:14:09.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"712284-1584033249003-e3550527","meta_rev_id":"178048bd8a322e3f1fcfc3bd7f9a19a78b501816","_number":712284,"virtual_id_number":712284,"owner":{"_account_id":14369,"name":"Mark Chappell","email":"mchappel@redhat.com","username":"tremble"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":0,"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-03-12 17:14:08.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"all":[{"value":2,"date":"2020-03-11 13:19:00.000000000","_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":2,"date":"2020-03-12 15:22:04.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"all":[{"value":0,"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"value":1,"date":"2020-03-12 15:22:04.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-03-11 13:19:00.000000000","updated_by":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"reviewer":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"state":"REVIEWER"},{"updated":"2020-03-12 15:22:04.000000000","updated_by":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"reviewer":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"state":"REVIEWER"},{"updated":"2020-03-12 17:14:08.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"80a521dc778c1cf46a1da0f901da8d132af32543","author":{"_account_id":14369,"name":"Mark Chappell","email":"mchappel@redhat.com","username":"tremble"},"date":"2020-03-11 08:48:09.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"aea78810f0e3a1508c3707549a4dfec6a01c3310","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-03-11 10:20:26.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- puppet-openstack-lint-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/5f83d13c61a345ccb7834013b6764e94 : SUCCESS in 5m 42s\n- puppet-openstack-syntax-5-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/74529d79a7cb4824b555347751c34890 : SUCCESS in 4m 53s\n- puppet-openstack-syntax-6-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/81f0322d67564276bf71fbfc53959698 : SUCCESS in 5m 45s\n- puppet-openstack-unit-5.5-centos-7 https://zuul.opendev.org/t/openstack/build/169be2c773b6417fbd670f6233b4df27 : SUCCESS in 15m 49s\n- puppet-openstack-integration-5-scenario001-tempest-centos-7-luminous https://zuul.opendev.org/t/openstack/build/f7f876ba98ad495d9d9b212b29a002b6 : SUCCESS in 1h 00m 06s\n- puppet-openstack-integration-5-scenario002-tempest-centos-7 https://zuul.opendev.org/t/openstack/build/942a1731a73842d0a0106895f7c35331 : SUCCESS in 1h 06m 14s\n- puppet-openstack-integration-5-scenario003-tempest-centos-7 https://zuul.opendev.org/t/openstack/build/b905195e5f804ede91f63b7409ac4c5f : SUCCESS in 1h 10m 14s\n- puppet-openstack-integration-5-scenario004-tempest-centos-7-nautilus https://zuul.opendev.org/t/openstack/build/62eed52ed0164e4785c722b59469262c : SUCCESS in 53m 06s\n- puppet-openstack-integration-5-scenario001-tempest-ubuntu-bionic-mimic https://zuul.opendev.org/t/openstack/build/0712a62f3b1747209ef0a007d0e3d428 : SUCCESS in 1h 13m 12s (non-voting)\n- puppet-openstack-integration-5-scenario002-tempest-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/bfe1b3379c9147f7b9b2b906f4393a6a : SUCCESS in 56m 07s (non-voting)\n- puppet-openstack-integration-5-scenario003-tempest-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/47f9db3e06ca40e69034e65e6994396e : SUCCESS in 59m 28s (non-voting)\n- puppet-openstack-integration-5-scenario004-tempest-ubuntu-bionic-mimic https://zuul.opendev.org/t/openstack/build/ed1780aab5534b56a63359100a66e65f : SUCCESS in 54m 54s (non-voting)\n- puppet-openstack-integration-5-scenario001-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/d3cd107597484425a164d0b0b42a7a45 : SUCCESS in 1h 14m 50s (non-voting)\n- puppet-openstack-integration-5-scenario002-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/6fc7ac5e5c2e42eaab9fb55415720053 : SUCCESS in 1h 17m 37s (non-voting)\n- puppet-openstack-integration-5-scenario003-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/191a9330529b48c5a0f6b2898f74a5dd : SUCCESS in 1h 22m 30s (non-voting)\n- puppet-openstack-integration-5-scenario004-tempest-centos-8 https://zuul.opendev.org/t/openstack/build/b890c65b32c540d4bb3ecb6b9d2ad1b8 : SUCCESS in 1h 01m 05s (non-voting)\n- puppet-openstack-beaker-centos-7 https://zuul.opendev.org/t/openstack/build/6eb519e4d5e54be69fd22c403d930095 : SUCCESS in 43m 21s\n- puppet-openstack-beaker-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/1fe3370453ea46b68b5a12f52c6e1804 : FAILURE in 1h 02m 39s (non-voting)\n- puppet-keystone-tripleo-standalone https://zuul.opendev.org/t/openstack/build/b8710cf667d14a1faa0b42e6b0bba943 : SUCCESS in 1h 25m 01s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"64ea37676c2b60544f6c43754e91989297d59ee1","author":{"_account_id":3153,"name":"Emilien Macchi","email":"emilien@redhat.com","username":"emilienm"},"date":"2020-03-11 13:19:00.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"a2d6132a53a8cdec56f08b227dd35c08bd1bf55a","author":{"_account_id":14985,"name":"Alex Schultz","email":"aschultz@next-development.com","username":"mwhahaha"},"date":"2020-03-12 15:22:04.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"9ce1edc2db24838f496f0f73c31b1457faa583e5","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-03-12 15:22:17.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"c14f9f10dd461c8bdc10702054673cfd1cfca145","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-03-12 17:14:08.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- puppet-openstack-lint-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/7e46d2f2c6eb4ff59a948b454b162348 : SUCCESS in 8m 04s\n- puppet-openstack-syntax-5-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/589c41fe4e4f46f3853661851f8dbb0b : SUCCESS in 6m 48s\n- puppet-openstack-syntax-6-ubuntu-bionic https://zuul.opendev.org/t/openstack/build/c3c2dc3e219140f18055b3cd4e8962da : SUCCESS in 8m 44s\n- puppet-openstack-unit-5.5-centos-7 https://zuul.opendev.org/t/openstack/build/867c3f67814a497d894f943caa11334b : SUCCESS in 25m 16s\n- puppet-openstack-integration-5-scenario001-tempest-centos-7-luminous https://zuul.opendev.org/t/openstack/build/b1c989b4643349a5b6409d3e5ac4610e : SUCCESS in 58m 50s\n- puppet-openstack-integration-5-scenario002-tempest-centos-7 https://zuul.opendev.org/t/openstack/build/e472cf5c2e904312ab82f2ad36da0914 : SUCCESS in 1h 00m 02s\n- puppet-openstack-integration-5-scenario003-tempest-centos-7 https://zuul.opendev.org/t/openstack/build/804c9dc6762747f09458d7f494da0136 : SUCCESS in 1h 16m 48s\n- puppet-openstack-integration-5-scenario004-tempest-centos-7-nautilus https://zuul.opendev.org/t/openstack/build/740f02d3f3f24110a5c256eef3e26bbd : SUCCESS in 50m 02s\n- puppet-openstack-beaker-centos-7 https://zuul.opendev.org/t/openstack/build/e02ab78ea386487c99a469eb9a39c1d6 : SUCCESS in 44m 32s\n- puppet-keystone-tripleo-standalone https://zuul.opendev.org/t/openstack/build/2a4c713c45554e6aa4b09135776f5dba : SUCCESS in 1h 23m 52s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"bfbd2e05709c047bb03b11ec1c4561af412706a8","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-03-12 17:14:09.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"a110c9666e609b61cf2de3ffcb6c64a84c7c9038","revisions":{"a110c9666e609b61cf2de3ffcb6c64a84c7c9038":{"kind":"REWORK","_number":1,"created":"2020-03-11 08:48:09.000000000","uploader":{"_account_id":14369,"name":"Mark Chappell","email":"mchappel@redhat.com","username":"tremble"},"ref":"refs/changes/84/712284/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/puppet-keystone","ref":"refs/changes/84/712284/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/84/712284/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/84/712284/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/puppet-keystone refs/changes/84/712284/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/puppet-keystone refs/changes/84/712284/1"}}},"commit":{"parents":[{"commit":"8a3172e5a6ffd9694ad4c3ea9ba5f86c95965792","subject":"Fix performance regression due to reduced number of keystone workers","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/8a3172e5a6ffd9694ad4c3ea9ba5f86c95965792"}]}],"author":{"name":"Mark Chappell","email":"mchappel@redhat.com","date":"2020-03-06 15:06:06.000000000","tz":60},"committer":{"name":"Mark Chappell","email":"mchappel@redhat.com","date":"2020-03-11 08:48:09.000000000","tz":0},"subject":"Add support for JWKS based OAuth Token validation.","message":"Add support for JWKS based OAuth Token validation.\n\nKeycloak only enables the introspection API when using a \u0027confidential\u0027\nclient.  This means that for user initiated OAuth2 tokens the user would\nneed to know the secrets for a client (ie the confidential piece).\n\nWith Keycloak to use a \u0027public\u0027 client, where the user doesn\u0027t need to\nknow a client secret, you need to use a JWKS to validate the JWT tokens\ninstead of the introspection endpoint.  OIDCOAuthVerifyJwksUri tells\nmod_auth_openidc where to find that certificate.  You also need to\n*remove* OIDCOAuthIntrospectionEndpoint as this conflicts with\nOIDCOAuthVerifyJwksUri\n\nChange-Id: I95220db87f61ca19e50c64b4f799d3973b256858\n(cherry picked from commit 6d6860ac4965e528a7f858c8b970964cbbaba0aa)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/a110c9666e609b61cf2de3ffcb6c64a84c7c9038"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/puppet-keystone/commit/a110c9666e609b61cf2de3ffcb6c64a84c7c9038"}]},"branch":"refs/heads/stable/train"}},"requirements":[],"submit_records":[],"submit_requirements":[]}