Bug 767330

Summary:	non-existant oauth keys are authenticated
Product:	[Retired] CloudForms Cloud Engine	Reporter:	Dan Radez <dradez>
Component:	aeolus-configserver	Assignee:	Dan Radez <dradez>
Status:	CLOSED NOTABUG	QA Contact:	dgao
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	1.0.0	CC:	akarol, deltacloud-maint, whayutin
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-12-14 18:29:16 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Bug Depends On:
Bug Blocks:	750954

Description Dan Radez 2011-12-13 20:05:19 UTC

Description of problem:
if you pass an oauth key that is undefined in configserver it will return positive authentication

Version-Release number of selected component (if applicable):
0.4.3

How reproducible:
just pass a key that doesn't exist in the configserver

Steps to Reproduce:
1. call /auth with a non-existent oauth key
2.
3.
  
Actual results:
authentication for non-existent oauth keys

Expected results:
401 for non-existent oauth keys

Additional info: