Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/pipeline-token-provider.

Description:

To modify the token provider requires completely replacing the existing code and either subclassing it or reimplementing it. 

The token provider instead will be a pipeline of components that perform the following tasks by default:

# authenticate the user
# gather a list of groups for the user
# map the groups and userid to role assignments
# select the subset of the service catalog to include in the document
# package the data into a document
# sign the document
# assign a userid
# record the document to persistant store
# return the document

Each of these stages will be implemented by a component that has a standard interface
Any one of these steps can be replaced with a component that implements the same interface as the existing one
additional pipeline components can be inserted provided they implement the standard interface

the pipeline components will be specified by paste or a comparable text file configuration.



Specification URL (additional information):

None