Keyrock Token duration

asked 2016-12-07 13:06:59 +0200

emendes
1 ●1 ●2 ●2

updated 2016-12-07 13:22:18 +0200

Hi,

How do I configure the token duration in my instance of Keyrock? I am trying without success to set "expiration" in the section [token] of the keystone.conf .

Best regards,

Eduardo Mendes

edit retag flag offensive close merge delete

add a comment

0

answered 2016-12-13 10:28:21 +0200

aalonsog
46 ●1

Hi, Keystone tokens expiration time is configured in https://github.com/ging/keystone/blob...

Regarding OAuth2 tokens, right now the expiration time is not configurable. We have plans of adding this possibility soon.

edit flag offensive delete link

Comments

Thank you. Is exactly OAuth2 tokens that I need, because of the proxy Wilma.

emendes ( 2016-12-13 15:41:56 +0200 )edit

add a comment

0

answered 2016-12-14 01:18:22 +0200

emendes
1 ●1 ●2 ●2

I implemented a simple solution to work with OAuth2, using the same configuration of [token] expiration:

In the file "keystone/contrib/oauth2/core.py"

1) import CONF: from keystone import config CONF = config.CONF

2) add this line in "def init" of "class Server", just after the comments: tokenexpiresin=CONF.token.expiration

That is it. Now it is possible to change the token duration in seconds uncommenting "expiration" inside [token] of keystone.conf

edit flag offensive delete link

Comments

As OAuth2 and Keystone tokens are different, they should also have different expiration time parameters in the configuration. Please, could you implement it that way and contribute the code to the project?

aalonsog ( 2016-12-14 11:41:56 +0200 )edit

Maybe creating a new session [oauth2] inside keystone.conf ?

emendes ( 2016-12-14 12:51:51 +0200 )edit

Done. Please give me access to ging/keystone too, in the github.

emendes ( 2016-12-14 13:26:48 +0200 )edit

add a comment

Keyrock Token duration

2 answers

Comments

Comments

Question Tools

Stats

Related questions