Open Stack

We are content to announce the release of:

keystonemiddleware 4.5.0: Middleware for OpenStack Identity

This release is part of the newton release series.

With source available at:

    http://git.openstack.org/cgit/openstack/keystonemiddleware

With package available at:

    https://pypi.python.org/pypi/keystonemiddleware

Please report issues through launchpad:

    http://bugs.launchpad.net/keystonemiddleware

For more details, please see below.

4.5.0
^^^^^


New Features
************

* [bug 1544840
  (https://bugs.launchpad.net/keystonemiddleware/+bug/1544840)] Adding
  audit middleware specific notification related configuration to
  allow a different notification driver and transport for audit if
  needed.

* A new configuration option for the s3token middleware called
  auth_uri can be used to set the URI to be used for authentication.
  This replaces auth_host, auth_port, and auth_protocol.


Deprecation Notes
*****************

* The auth_host, auth_port, and auth_protocol configuration options
  to the s3token middleware are now deprecated.

Changes in keystonemiddleware 4.3.0..4.5.0
------------------------------------------

8da3eac Updated from global requirements
0068307 Updated from global requirements
c801117 Fix D105: Missing docstring in magic method (PEP257)
a2afaa9 Fix D200: One-line docstring should fit on one line with quotes (PEP257)
ee73f70 Fix D202: No blank lines allowed after function docstring (PEP257)
c813c35 Adding audit middleware specific notification driver conf
952d203 remove old options from documentation
95ba901 generate sample config automatically
3d40f1b Return default value for pkg_version if missing
adcdd17 Updated from global requirements
ed931a0 Fix D204 PEP257 violation and enable D301 and D209
d7bf1a7 Fix D400 PEP257 violation
92983b1 Fix D401 PEP257 violation and enable H403
5ef2e51 Update config options
8dee745 s3token config with auth URI
89ec136 Updated from global requirements
8d52a83 Return JSON for Unauthorized message
57fbb72 Updated from global requirements
acaeaa0 Fix doc build if git is absent
45a0d08 PEP257: add flake8-docstring testing
5ba835f Only confirm token binding on one token
0f426e7 Create signing_dir upon first usage
1c764b8 Updated from global requirements
53335aa Updated from global requirements
f54ff06 Handle cache invalidate outside cache object
0f2c3fd Update reno for stable/mitaka
45136e0 Remove bandit.yaml in favor of defaults
247d800 use the same context across a request
f6b719b Updated from global requirements
05a20bb Update documentation for running tests
aea1f4f Updated from global requirements
ead6061 Add back a bandit tox job

Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |   3 +
bandit.yaml                                        | 119 ------------
config-generator/keystonemiddleware.conf           |   4 +
keystonemiddleware/audit.py                        |  73 +++++--
keystonemiddleware/auth_token/__init__.py          |  56 ++++--
keystonemiddleware/auth_token/_cache.py            |  41 +---
keystonemiddleware/auth_token/_memcache_crypt.py   |  12 +-
keystonemiddleware/auth_token/_memcache_pool.py    |   3 +-
keystonemiddleware/auth_token/_request.py          |   9 +-
keystonemiddleware/auth_token/_signing_dir.py      |  21 +-
keystonemiddleware/auth_token/_user_plugin.py      |   2 +-
keystonemiddleware/ec2_token.py                    |   7 +-
keystonemiddleware/echo/__main__.py                |   3 +-
keystonemiddleware/echo/service.py                 |   5 +-
keystonemiddleware/fixture.py                      |   1 -
keystonemiddleware/s3_token.py                     |  23 ++-
.../unit/auth_token/test_auth_token_middleware.py  |  76 +++++++-
.../notes/bug-1544840-a534127f8663e40f.yaml        |   6 +
.../notes/s3token_auth_uri-490c1287d90b9df7.yaml   |   8 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/mitaka.rst                     |   6 +
requirements.txt                                   |  10 +-
test-requirements.txt                              |  11 +-
tox.ini                                            |  19 +-
35 files changed, 506 insertions(+), 499 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 733e4a9..e676f27 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,2 +6,2 @@ keystoneauth1>=2.1.0 # Apache-2.0
-oslo.config>=3.4.0 # Apache-2.0
-oslo.context>=0.2.0 # Apache-2.0
+oslo.config>=3.9.0 # Apache-2.0
+oslo.context>=2.2.0 # Apache-2.0
@@ -10 +10 @@ oslo.serialization>=1.10.0 # Apache-2.0
-oslo.utils>=3.4.0 # Apache-2.0
+oslo.utils>=3.5.0 # Apache-2.0
@@ -14,2 +14,2 @@ pycadf!=2.0.0,>=1.1.0 # Apache-2.0
-python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0
-requests!=2.9.0,>=2.8.1 # Apache-2.0
+python-keystoneclient!=1.8.0,!=2.1.0,>=1.7.0 # Apache-2.0
+requests>=2.10.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index 357d49e..42b7bc7 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -5,0 +6 @@ hacking<0.11,>=0.10.0
+flake8-docstrings==0.2.1.post1 # MIT
@@ -8 +9 @@ coverage>=3.6 # Apache-2.0
-fixtures>=1.3.1 # Apache-2.0/BSD
+fixtures<2.0,>=1.3.1 # Apache-2.0/BSD
@@ -13,2 +14,2 @@ oslotest>=1.10.0 # Apache-2.0
-oslo.messaging>=4.0.0 # Apache-2.0
-reno>=0.1.1 # Apache2
+oslo.messaging>=4.5.0 # Apache-2.0
+reno>=1.6.2 # Apache2
@@ -17 +18 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD
-stevedore>=1.5.0 # Apache-2.0
+stevedore>=1.10.0 # Apache-2.0
@@ -24 +25 @@ python-memcached>=1.56 # PSF
-bandit>=0.17.3 # Apache-2.0
+bandit>=1.0.1 # Apache-2.0