Identity API v2.0 extensions (DEPRECATED)

Show All

OS-KSEC2 admin extension

Supports Amazon Elastic Compute (EC2) style authentication.

POST

/v2.0/ec2tokens

EC2 Authentication

detail

Authenticate for token.

Request

Example

{  "credentials": {  "access": "8cff51dc66594df4a2ae121f796df36c",  "host": "localhost",  "params": {  "Action": "Test",  "SignatureMethod": "HmacSHA256",  "SignatureVersion": "2",  "Timestamp": "2007-01-31T23:59:59Z"  },  "path": "/",  "secret": "df8daeaa981b40cea1217fead123bc64",  "signature": "Fra2UBKKtqy3GQ0mj+JqzR8GTGsbWQW+yN5Nih9ThfI=",  "verb": "GET"  } } 

Parameters

Response

Status Codes

Success

Code	Reason
200 - OK	Request was successful.

Error

Code	Reason
400 - Bad Request	Some content in the request was invalid.
401 - Unauthorized	User must authenticate before making a request.

Example

{  "access": {  "metadata": {  "is_admin": 0,  "roles": ["9fe2ff9ee4384b1894a90878d3e92bab"]  },  "serviceCatalog": [],  "token": {  "audit_ids": ["AVUi_tN8SFWnHYaYpCcMEQ"],  "expires": "2018-02-02T21:13:19.000000Z",  "id": "gAAAAABadMZfZa_PZNOSi5iQoqPZ1b-VIo2Gnlf4Z_oJotw8qTh1Yv8_CFysOnoxRIrfFI-EcrErdJM2CrP7o6aDNR5AbfnFtSN_zgzzesEWaOaQkoLpk9X1lLada2KcQpWAeNafjNYSiP7JFjW6N4ngAm9U7egUW6MwUPPxi5e8igR5DtNc0FU",  "issued_at": "2018-02-02T20:13:19.000000Z",  "tenant": {  "description": "description",  "enabled": true,  "id": "6b85a6ff4e0b4040a81708d6e063e4e7",  "name": "BAR",  "tags": []  }  },  "user": {  "id": "b245550742cf4c2fb9cf37aa1eda866e",  "name": "foo",  "roles": [  {"name": "_member_"}  ],  "roles_links": [],  "username": "foo"  }  } } 

POST

/v2.0/users/{userId}/credentials/OS-EC2

Grant credential to user

detail

Grants a credential to a user.

Request

Name	In	Type	Description
userId	path	string	The user ID.

Example

{  "OS-KSEC2-ec2Credentials": {  "username": "test_user",  "secret": "secretsecret",  "signature": "bbb"  } } 

Response

Status Codes

Success

Code	Reason
201 - Created	Resource was created and is ready to use.

Error

Code	Reason
400 - Bad Request	Some content in the request was invalid.
401 - Unauthorized	User must authenticate before making a request.
403 - Forbidden	Policy does not allow current user to do this operation.
404 - Not Found	The requested resource could not be found.
405 - Method Not Allowed	Method is not valid for this endpoint.
409 - Conflict	This operation conflicted with another operation on this resource.
413 - Request Entity Too Large	The request is larger than the server is willing or able to process.
415 - Unsupported Media Type	The request entity has a media type which the server or resource does not support.
503 - Service Unavailable	Service is not available. This is mostly caused by service configuration errors which prevents the service from successful start up.

GET

/v2.0/users/{userId}/credentials/OS-EC2

List credentials (EC2 extension)

detail

Lists credentials.

Request

Name	In	Type	Description
userId	path	string	The user ID.

Response

Status Codes

Success

Code	Reason
200 - OK	Request was successful.

Error

Code	Reason
400 - Bad Request	Some content in the request was invalid.
401 - Unauthorized	User must authenticate before making a request.
403 - Forbidden	Policy does not allow current user to do this operation.
404 - Not Found	The requested resource could not be found.
405 - Method Not Allowed	Method is not valid for this endpoint.
413 - Request Entity Too Large	The request is larger than the server is willing or able to process.
503 - Service Unavailable	Service is not available. This is mostly caused by service configuration errors which prevents the service from successful start up.

Example

{  "credentials": [  {  "passwordCredentials": {  "username": "test_user",  "password": "secretsecret"  }  },  {  "OS-KSEC2-ec2Credentials": {  "username": "test_user",  "secret": "secretsecret",  "signature": "bbb"  }  }  ],  "credentials_links": [] } 

DELETE

/v2.0/users/{userId}/credentials/OS-EC2/{credentialId}

Delete user credentials

detail

Deletes user credentials.

Request

Name	In	Type	Description
userId	path	string	The user ID.
credentialId	path	string	The credential id.

Response

Status Codes

Success

Code	Reason
204 - No Content	The server has fulfilled the request.

Error

Code	Reason
400 - Bad Request	Some content in the request was invalid.
401 - Unauthorized	User must authenticate before making a request.
403 - Forbidden	Policy does not allow current user to do this operation.
404 - Not Found	The requested resource could not be found.
405 - Method Not Allowed	Method is not valid for this endpoint.
409 - Conflict	This operation conflicted with another operation on this resource.
413 - Request Entity Too Large	The request is larger than the server is willing or able to process.
415 - Unsupported Media Type	The request entity has a media type which the server or resource does not support.
503 - Service Unavailable	Service is not available. This is mostly caused by service configuration errors which prevents the service from successful start up.

GET

/v2.0/users/{userId}/credentials/OS-EC2/{credentialId}

Get user credentials

detail

Gets user credentials.

Request

Name	In	Type	Description
userId	path	string	The user ID.
credentialId	path	string	The credential id.

Response

Status Codes

Success

Code	Reason
200 - OK	Request was successful.

Error

Code	Reason
400 - Bad Request	Some content in the request was invalid.
401 - Unauthorized	User must authenticate before making a request.
403 - Forbidden	Policy does not allow current user to do this operation.
404 - Not Found	The requested resource could not be found.
405 - Method Not Allowed	Method is not valid for this endpoint.
413 - Request Entity Too Large	The request is larger than the server is willing or able to process.
503 - Service Unavailable	Service is not available. This is mostly caused by service configuration errors which prevents the service from successful start up.

Example

{  "OS-KSEC2-ec2Credentials": {  "username": "test_user",  "secret": "secretsecret",  "signature": "bbb"  } }