Enabling the OS-REVOKE ExtensionΒΆ
Warning
The OS-REVOKE Extension is considered experimental in Icehouse and will continue to see improvement over the next development cycle.
To enable the OS-REVOKE extension:
Add the driver fields and values in the [revoke] section in keystone.conf. For the KVS Driver:
[revoke] driver = keystone.contrib.revoke.backends.kvs.Revoke
For the SQL driver:
driver = keystone.contrib.revoke.backends.sql.Revoke
Add the required filter to the pipeline in keystone-paste.ini:
[filter:revoke_extension] paste.filter_factory = keystone.contrib.revoke.routers:RevokeExtension.factory [pipeline:api_v3] pipeline = access_log sizelimit url_normalize token_auth admin_token_auth xml_body json_body revoke_extension service_v3
Create the extension tables if using the provided SQL backend:
./bin/keystone-manage db_sync --extension revoke