openstack/swift
Code Issues Proposed changes
4332bff3f5
swift/test/unit/common/middleware
History
Donagh McCabe eb99e8f84c Obscure the X-Auth-Token in proxy log 
The X-Auth-Token is sensitive data. If revealed to an unauthozied person,
they can now make requests against an account until the token expires.

This implementation maintains current behavior (i.e, the token
is logged). Implementers can choose to set reveal_sensitive_prefix
to (e.g.) 12 so only first 12 characters of the token are logged.
Or, set to 0 to replace the token with "...".

DocImpact

Part of bug #1004114

Change-Id: Iecefa843d8f9ef59b9dcf0860e7a4d0e186a6cb5
2013-07-30 09:37:27 +01:00
..
__init__.py Initial commit of middleware refactor 2010-08-20 00:42:38 +00:00
test_account_quotas.py Make sure users can't remove their account quotas 2013-07-24 16:11:03 -07:00
test_acl.py updated copyright date for all files 2012-03-19 13:45:34 -05:00
test_bulk.py Fix bulk's unit tests on Mac OS. 2013-07-23 15:30:11 -07:00
test_cname_lookup.py Corrected many style violations in the tests. 2013-07-24 10:18:47 -07:00
test_crossdomain.py Corrected many style violations in the tests. 2013-07-24 10:18:47 -07:00
test_domain_remap.py Fixed bug in domain_remap and cname_lookup middleware 2013-01-23 09:36:37 +09:00
test_except.py Enhance log msg to report referer and user-agent 2013-05-13 17:39:02 +00:00
test_formpost.py Corrected many style violations in the tests. 2013-07-24 10:18:47 -07:00
test_healthcheck.py Allow optional, temporary healthcheck failure. 2012-12-04 09:14:27 -08:00
test_keystoneauth.py Merge "Don't allow users to delete their own account." 2013-07-23 01:23:54 +00:00
test_list_endpoints.py fixed some minor things in tests that pyflakes complained about 2013-03-26 20:42:26 +00:00
test_memcache.py fixed some minor things in tests that pyflakes complained about 2013-03-26 20:42:26 +00:00
test_name_check.py local WSGI Request and Response classes 2012-09-28 14:48:48 -07:00
test_proxy_logging.py Obscure the X-Auth-Token in proxy log 2013-07-30 09:37:27 +01:00
test_quotas.py Fix obscure double url bug in container quota middleware 2013-05-13 19:17:31 +00:00
test_ratelimit.py Container info memcache change broke ratelimiting. 2013-04-24 13:41:14 -07:00
test_recon.py Remove extra lstat() calls from check_mount 2013-07-22 10:05:37 -04:00
test_slo.py Allow SLOs to be made up of other SLOs 2013-06-26 09:44:33 -07:00
test_staticweb.py Encode unicode from JSON before using it as a string. 2013-07-29 14:56:50 -07:00
test_tempauth.py TempAuth: don't return 401/403 if .r without .rlistings 2013-06-26 23:35:16 +08:00
test_tempurl.py Corrected many style violations in the tests. 2013-07-24 10:18:47 -07:00