Open Stack

We are stoked to announce the release of:

keystonemiddleware 4.2.0: Middleware for OpenStack Identity

This release is part of the mitaka release series.

With source available at:

    http://git.openstack.org/cgit/openstack/keystonemiddleware

With package available at:

    https://pypi.python.org/pypi/keystonemiddleware

Please report issues through launchpad:

    http://bugs.launchpad.net/keystonemiddleware

For more details, please see below.

4.2.0
^^^^^

Deprecation Notes

* With the release of 4.2.0 of keystonemiddleware we no longer
  recommend using the in-process token cache. In-process caching may
  result in inconsistent validation, poor UX and race conditions. It
  is recommended that the *memcached_servers* option is set in the
  *keystone_authtoken* configuration section of the various services
  (e.g. nova, glance, ...) with the endpoint of running memcached
  server(s). When the feature is removed, not setting the
  *memcached_servers* option will cause keystone to validate tokens
  more frequently, increasing load. In production, use of caching is
  highly recommended. This feature is deprecated as of 4.2.0 and is
  targeted for removal in keystonemiddleware 5.0.0 or in the *O*
  development cycle, whichever is later.


Changes in keystonemiddleware 4.1.0..4.2.0
------------------------------------------

26707bd Updated from global requirements
f1aa486 Deprecate in-process cache
70a9754 Revert "Disable memory caching of tokens"
f57a839 Revert "Don't cache signed tokens"
b691b62 Updated from global requirements
63f0fc3 Merge pep8 and bandit into linters
14cfc27 Fix tests to work with keystoneauth1 2.2.0
1200d7a Bandit profile updates
5dba16b Replace deprecated library function os.popen() with subprocess

Diffstat (except docs and test files)
-------------------------------------

bandit.yaml                                        | 17 +---
keystonemiddleware/auth_token/__init__.py          | 52 +++++++-----
keystonemiddleware/auth_token/_cache.py            | 95 ++++-----------------
keystonemiddleware/openstack/__init__.py           |  0
keystonemiddleware/openstack/common/__init__.py    |  0
keystonemiddleware/openstack/common/memorycache.py | 97 ++++++++++++++++++++++
.../unit/auth_token/test_auth_token_middleware.py  | 67 +++------------
openstack-common.conf                              |  1 +
...caching-tokens-in-process-a412b0f1dea84cb9.yaml | 18 ++++
requirements.txt                                   | 20 ++---
test-requirements.txt                              | 22 ++---
tox.ini                                            | 14 +++-
14 files changed, 215 insertions(+), 246 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index e05c8f1..3152749 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,2 +5,2 @@
-Babel>=1.3
-keystoneauth1>=2.1.0
+Babel>=1.3 # BSD
+keystoneauth1>=2.1.0 # Apache-2.0
@@ -9 +9 @@ oslo.context>=0.2.0 # Apache-2.0
-oslo.i18n>=1.5.0 # Apache-2.0
+oslo.i18n>=2.1.0 # Apache-2.0
@@ -11,7 +11,7 @@ oslo.serialization>=1.10.0 # Apache-2.0
-oslo.utils>=3.2.0 # Apache-2.0
-pbr>=1.6
-pycadf!=2.0.0,>=1.1.0
-python-keystoneclient!=1.8.0,>=1.6.0
-requests!=2.9.0,>=2.8.1
-six>=1.9.0
-WebOb>=1.2.3
+oslo.utils>=3.4.0 # Apache-2.0
+pbr>=1.6 # Apache-2.0
+pycadf!=2.0.0,>=1.1.0 # Apache-2.0
+python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0
+requests!=2.9.0,>=2.8.1 # Apache-2.0
+six>=1.9.0 # MIT
+WebOb>=1.2.3 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 5547a9d..682422d 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -7,4 +7,4 @@ hacking<0.11,>=0.10.0
-coverage>=3.6
-fixtures>=1.3.1
-mock>=1.2
-pycrypto>=2.6
+coverage>=3.6 # Apache-2.0
+fixtures>=1.3.1 # Apache-2.0/BSD
+mock>=1.2 # BSD
+pycrypto>=2.6 # Public Domain
@@ -13 +13 @@ oslotest>=1.10.0 # Apache-2.0
-oslo.messaging!=2.8.0,!=3.1.0,>2.6.1 # Apache-2.0
+oslo.messaging>=4.0.0 # Apache-2.0
@@ -16 +16 @@ requests-mock>=0.7.0 # Apache-2.0
-sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2
+sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD
@@ -18,4 +18,4 @@ stevedore>=1.5.0 # Apache-2.0
-testrepository>=0.0.18
-testresources>=0.2.4
-testtools>=1.4.0
-python-memcached>=1.56
+testrepository>=0.0.18 # Apache-2.0/BSD
+testresources>=0.2.4 # Apache-2.0/BSD
+testtools>=1.4.0 # MIT
+python-memcached>=1.56 # PSF
@@ -24 +24 @@ python-memcached>=1.56
-bandit>=0.13.2
+bandit>=0.13.2 # Apache-2.0