Public bug reported:

Ephemeral users' id should always be url-safe. Sadly, id the mapping
rule specifies user's id the value will be passed as-is and never url-
encoded. We should change auth.plugins.mapped.setup_username() function
and make sure user_id is always treated with
six.moves.urllib.parse.quote()  function.

** Affects: keystone
     Importance: Medium
     Assignee: Marek Denis (marek-denis)
         Status: In Progress


** Tags: federation

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1487115

Title:
  Ephemeral user's id is not always urlsafe

Status in Keystone:
  In Progress

Bug description:
  Ephemeral users' id should always be url-safe. Sadly, id the mapping
  rule specifies user's id the value will be passed as-is and never url-
  encoded. We should change auth.plugins.mapped.setup_username()
  function and make sure user_id is always treated with
  six.moves.urllib.parse.quote()  function.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1487115/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to