)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"5aa03f903c61a624e22305ee4ebbf168d2a8986a","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Get revocation list with only audit ids"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"A new audti_id_only argument is added to get_revoked which if True"},{"line_number":10,"context_line":"requests that the server return audit IDs and not token IDs."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Closes-Bug: 1317302"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"fa69d971_0dc4753e","line":9,"range":{"start_line":9,"start_character":6,"end_line":9,"end_character":11},"updated":"2015-12-29 16:26:28.000000000","message":"-\u003e audit","commit_id":"6bc37c594c3fd9c329b12944a798380ee4926a9b"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"5aa03f903c61a624e22305ee4ebbf168d2a8986a","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Get revocation list with only audit ids"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"A new audti_id_only argument is added to get_revoked which if True"},{"line_number":10,"context_line":"requests that the server return audit IDs and not token IDs."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Closes-Bug: 1317302"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"fa69d971_ede1e1d1","line":9,"range":{"start_line":9,"start_character":62,"end_line":9,"end_character":66},"updated":"2015-12-29 16:26:28.000000000","message":"-\u003e present","commit_id":"6bc37c594c3fd9c329b12944a798380ee4926a9b"}],"keystoneclient/tests/unit/v3/test_tokens.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c4c8c5da479acf681f49bba1c3dd9a87ea91708d","unresolved":false,"context_lines":[{"line_number":48,"context_line":"        self.assertEqual(sample_revoked_response, resp)"},{"line_number":49,"context_line":""},{"line_number":50,"context_line":"    def test_get_revoked_audit_id_only(self):"},{"line_number":51,"context_line":"        # When get_revoked(audit_id_only\u003dTrue) then ?audit_id_only is set on"},{"line_number":52,"context_line":"        # the request."},{"line_number":53,"context_line":"        sample_revoked_response \u003d {"},{"line_number":54,"context_line":"            \u0027revoked\u0027: ["}],"source_content_type":"text/x-python","patch_set":4,"id":"5a5ae5dd_db3e808b","line":51,"updated":"2016-02-05 14:47:45.000000000","message":"++ thanks for adding","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"}],"keystoneclient/v3/tokens.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e64acb00f62cc55ee8824449a9327e13b8ef1722","unresolved":false,"context_lines":[{"line_number":52,"context_line":"        :rtype: dict"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"        \"\"\""},{"line_number":55,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":56,"context_line":"        if audit_id_only:"},{"line_number":57,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":58,"context_line":"        resp, body \u003d self._client.get(path)"},{"line_number":59,"context_line":"        return body"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"    @utils.positional.method(1)"}],"source_content_type":"text/x-python","patch_set":3,"id":"9a68dd71_56bad1e2","line":58,"range":{"start_line":55,"start_character":8,"end_line":58,"end_character":43},"updated":"2016-01-21 02:55:28.000000000","message":"This looks really straight forward - just needs some tests.","commit_id":"bebc6ec72c5b052dcc9ea5a402018c90e0018502"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"6123838ea5fda1ec5b1bc9a850c3ded915c9c0cf","unresolved":false,"context_lines":[{"line_number":52,"context_line":"        :rtype: dict"},{"line_number":53,"context_line":""},{"line_number":54,"context_line":"        \"\"\""},{"line_number":55,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":56,"context_line":"        if audit_id_only:"},{"line_number":57,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":58,"context_line":"        resp, body \u003d self._client.get(path)"},{"line_number":59,"context_line":"        return body"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"    @utils.positional.method(1)"}],"source_content_type":"text/x-python","patch_set":3,"id":"9a68dd71_c69d45bd","line":58,"range":{"start_line":55,"start_character":8,"end_line":58,"end_character":43},"in_reply_to":"9a68dd71_56bad1e2","updated":"2016-01-22 20:04:18.000000000","message":"Done","commit_id":"bebc6ec72c5b052dcc9ea5a402018c90e0018502"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a12ad31fad253b88bec27e485d745a6186079a00","unresolved":false,"context_lines":[{"line_number":55,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":56,"context_line":"        if audit_id_only:"},{"line_number":57,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":58,"context_line":"        resp, body \u003d self._client.get(path)"},{"line_number":59,"context_line":"        return body"},{"line_number":60,"context_line":""},{"line_number":61,"context_line":"    @utils.positional.method(1)"}],"source_content_type":"text/x-python","patch_set":3,"id":"5a5ae5dd_3bc79497","line":58,"in_reply_to":"9a68dd71_c69d45bd","updated":"2016-02-05 14:47:27.000000000","message":"Thanks!","commit_id":"bebc6ec72c5b052dcc9ea5a402018c90e0018502"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c4c8c5da479acf681f49bba1c3dd9a87ea91708d","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        :rtype: dict"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"        \"\"\""},{"line_number":56,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":57,"context_line":"        if audit_id_only:"},{"line_number":58,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":59,"context_line":"        resp, body \u003d self._client.get(path)"}],"source_content_type":"text/x-python","patch_set":4,"id":"5a5ae5dd_9bf6c8f7","line":56,"updated":"2016-02-05 14:47:45.000000000","message":"This call will have to change once keystone removes PKI - right? Is there an equivalent call we can make to get the same list?","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"fc7aa31b504c3306d3671a7a5aae3a90411acee1","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        :rtype: dict"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"        \"\"\""},{"line_number":56,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":57,"context_line":"        if audit_id_only:"},{"line_number":58,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":59,"context_line":"        resp, body \u003d self._client.get(path)"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a57f1b5_ad01f707","line":56,"in_reply_to":"3a57f1b5_2373ef16","updated":"2016-02-12 13:53:38.000000000","message":"We could choose to drop the revocation list on the server. We could choose to not do revocation list in auth_token even if the server supports it. Users who want auth_token to check for revocations quickly would have to turn down the cache time.\n\nAlso, I\u0027m not sure how revocation list works with fernet anyways... since they\u0027re not persisted you\u0027d think that there\u0027s not revocation list. Something to try out.","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"190fd926aa55c827daa55053f2d4ea032556af75","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        :rtype: dict"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"        \"\"\""},{"line_number":56,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":57,"context_line":"        if audit_id_only:"},{"line_number":58,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":59,"context_line":"        resp, body \u003d self._client.get(path)"}],"source_content_type":"text/x-python","patch_set":4,"id":"ba0121b8_215a3451","line":56,"in_reply_to":"3a57f1b5_ad01f707","updated":"2016-04-01 19:59:13.000000000","message":"I was getting revocation lists mixed up with revocation events. One of the validity checks Fernet does is against revocation events, not lists. This obviously shouldn\u0027t impact fernet.\n\nI\u0027d vote for removing the support to get the revocation list once PKI/Z support is gone.","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"0c96bd872cb2b4abec2ce98bc820524af41d1987","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        :rtype: dict"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"        \"\"\""},{"line_number":56,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":57,"context_line":"        if audit_id_only:"},{"line_number":58,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":59,"context_line":"        resp, body \u003d self._client.get(path)"}],"source_content_type":"text/x-python","patch_set":4,"id":"5a5ae5dd_bb7b84f4","line":56,"in_reply_to":"5a5ae5dd_9bf6c8f7","updated":"2016-02-05 14:58:59.000000000","message":"I don\u0027t know what\u0027s going on with the removal of PKI. This API is required to get the list of revoked tokens. You can only get the revocation list if the tokens are persisted, so UUID,PKI,PKIZ tokens are but if you\u0027re using fernet then there\u0027s no revocation list. It\u0027s not PKI related.\n\nThere isn\u0027t another call to get the revocation list. There\u0027s revocation events... I don\u0027t know if keystoneclient has a function yet to fetch revocation events. auth_token doesn\u0027t support revocation events.","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"0fb6fb2d061b1c51c244db791bec5baf77498b77","unresolved":false,"context_lines":[{"line_number":53,"context_line":"        :rtype: dict"},{"line_number":54,"context_line":""},{"line_number":55,"context_line":"        \"\"\""},{"line_number":56,"context_line":"        path \u003d \u0027/auth/tokens/OS-PKI/revoked\u0027"},{"line_number":57,"context_line":"        if audit_id_only:"},{"line_number":58,"context_line":"            path +\u003d \u0027?audit_id_only\u0027"},{"line_number":59,"context_line":"        resp, body \u003d self._client.get(path)"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a57f1b5_2373ef16","line":56,"in_reply_to":"5a5ae5dd_bb7b84f4","updated":"2016-02-12 03:56:36.000000000","message":"Interesting. Do we bother with exposing revocations when PKI is dropped. Obviously keystone checks revocations but can we just say turn down the cache time and not expose revocations at all?","commit_id":"26a7ca47ea285a9d84c339377460f6b4b2b0b7ab"}]}