For the record, I double checked with the team and that's safe to be remove as we are not using the code from keystonemiddleware Cheers, Arnaud On 25.11.25 - 09:41, Arnaud Morin wrote:

Hi,

First, we use the s3token from keystone, but, AFAIR, we are not using it from keystonemiddleware. I will check with the team about this to be 100% sure.

Thank you for raising this to attention.

Arnaud

On 18.11.25 - 02:11, Takashi Kajinami wrote:

...

Hi,

I was going through the codes in keystonemiddleware recently and I'm wondering if anyone is using the following middlewares maintained there ? - EC2Token - S3Token (Note that this is different from S3Token maintained within swift)

I'm asking this question because these likely need to be updated to use authenticated access to keystone APIs due to recent vulnerability fix (s3tokens API and ec2tokens API now requires authentications by default). Technically we can fix these, but we would consider just deprecating these middlewares this cycle and removing them in H, if no one is actually using these. At least these codes have received no meaningful update for some years, and there is an indication of no usage like [1].

[1] https://review.opendev.org/c/openstack/keystonemiddleware/+/926459 This means s3token middleware was broken after identity v2 API removal, until this fix was merged in 2024 .

Thank you, Takashi

-- Takashi Kajinami irc: tkajinam github: https://github.com/kajinamit launchpad: https://launchpad.net/~kajinamit