Open Stack

We are satisfied to announce the release of:

keystoneauth1 2.10.0: Authentication Library for OpenStack Identity

This release is part of the newton release series.

With source available at:

    http://git.openstack.org/cgit/openstack/keystoneauth

With package available at:

    https://pypi.python.org/pypi/keystoneauth1

Please report issues through launchpad:

    http://bugs.launchpad.net/keystoneauth

For more details, please see below.

2.10.0
^^^^^^

Add the prompt parameter to loader Opts

Allow specifying additional_headers to the session and the adapter to
add headers to all requests that pass through these objects.


New Features
************

* Add support for the Client Credentials OpenID Connect grant type.

* Add support for the OpenID Connect Discovery Document
  (https://openid.net/specs/openid-connect-
  discovery-1_0.html#ProviderMetadata) into the OpenID Connect related
  plugins. Now it is possible to only pass the *discovery-url* option
  and the plugins will try to fetch the required metadata from there.

* The prompt parameter was added to the Opts provided by auth
  plugins. The presence of the prompt parameter on an Option will
  indicate to plugin loaders that it is ok to prompt the user for
  input for this parameter if none is provided initially. Actual
  implementation of this prompting mechanism will be handled by the
  individual loaders such as os-client-config.

* Add the ability to provide additional_headers to the session and
  adapter object. This will allow clients particularly to provide
  additional ways to identify their requests. It will also hopefully
  provide an intermediate way to handle setting microversions until we
  support them directly with keystoneauth.


Bug Fixes
*********

* [bug 1583682
  (https://bugs.launchpad.net/keystoneauth/+bug/1583682)] OpenID
  Connect plugins should support OpenID Connect Discovery.

Changes in keystoneauth1 2.9.0..2.10.0
--------------------------------------

6306504 Lazy load oauthlib for plugin loading
712ee40 oidc: add missing 'OidcAccessToken' to __all__
e5fd66c oidc: implement client_credentials grant type
67530bd Fix ECP doc link in Saml2 Password class doc
abb63ce Updated from global requirements
53f1e3c Fix link for "extras dependencies" in extras doc
c21ce26 Add pretty serializer for betamax fixture
bc90281 Update hacking to global-requirements value
701b911 Use SAML2 requests plugin
76bd9bb Updated from global requirements
9bf4efd oidc: move the get_unscoped_auth_ref into the base class
885aff0 oidc: deprecate grant_type argument
00746ea oidc: add discovery document support
1045a14 Add additional_headers to session and adapter
88d4fdb Add Python 3.5 classifier and venv
f2cc77c remove unused LOG
391499f Updated from global requirements
eff0936 Updated from global requirements
71d2e1a Add prompt parameter to Opt
e203d61 Auth plugin for X.509 tokenless authentication
68a7962 oidc: fix OpenID scope management
784ac09 Add create_plugin to loader


Diffstat (except docs and test files)
-------------------------------------

keystoneauth1/adapter.py                           |  11 +-
keystoneauth1/exceptions/__init__.py               |   1 +
keystoneauth1/exceptions/oidc.py                   |  44 ++
keystoneauth1/extras/_saml2/__init__.py            |   2 +
keystoneauth1/extras/_saml2/_loading.py            |   4 +
keystoneauth1/extras/_saml2/v3/__init__.py         |   2 +
keystoneauth1/extras/_saml2/v3/saml2.py            | 514 ++++++++++-----------
keystoneauth1/extras/oauth1/_loading.py            |   4 +
keystoneauth1/extras/oauth1/v3.py                  |   5 +-
keystoneauth1/fixture/keystoneauth_betamax.py      |   8 +-
keystoneauth1/fixture/serializer.py                |  92 ++++
keystoneauth1/identity/__init__.py                 |   9 +-
keystoneauth1/identity/generic/token.py            |   3 -
keystoneauth1/identity/v3/__init__.py              |   7 +-
keystoneauth1/identity/v3/oidc.py                  | 326 ++++++++++---
keystoneauth1/identity/v3/tokenless_auth.py        | 115 +++++
keystoneauth1/loading/_plugins/identity/generic.py |   5 +-
keystoneauth1/loading/_plugins/identity/v2.py      |   5 +-
keystoneauth1/loading/_plugins/identity/v3.py      |  90 +++-
keystoneauth1/loading/base.py                      |  22 +-
keystoneauth1/loading/opts.py                      |   6 +-
keystoneauth1/session.py                           |  10 +-
.../saml2/fixtures/templates/authn_request.xml     |  22 +
...d-oidc-client-credentials-2be065926ba4b849.yaml |   4 +
...iscovery-document-support-b07fe54f83286d62.yaml |  12 +
.../notes/add-prompt-to-opt-d083acc357a7f07b.yaml  |  10 +
.../notes/additional-headers-f2d16f85f5abe942.yaml |  10 +
requirements.txt                                   |   2 +-
setup.cfg                                          |   4 +
test-requirements.txt                              |   7 +-
tox.ini                                            |   2 +-
43 files changed, 1936 insertions(+), 612 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 0052c69..7fea9a8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10 +10 @@ six>=1.9.0 # MIT
-stevedore>=1.10.0 # Apache-2.0
+stevedore>=1.16.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index df4f591..a0a91cc 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5 +5 @@
-hacking<0.11,>=0.10.0
+hacking<0.12,>=0.11.0 # Apache-2.0
@@ -13 +13 @@ mock>=2.0 # BSD
-oslo.config>=3.10.0 # Apache-2.0
+oslo.config>=3.12.0 # Apache-2.0
@@ -15 +15 @@ oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0
-oslo.utils>=3.14.0 # Apache-2.0
+oslo.utils>=3.15.0 # Apache-2.0
@@ -25,0 +26 @@ testtools>=1.4.0 # MIT
+PyYAML>=3.1.0 # MIT