keystone v3认证API

请求参数

Body 参数application/json

auth

object

必需

keystone v3 认证接口认证信息

context

object (SAuthContext)

可选

identity

object (SAuthenticationIdentity)

必需

scope

object

可选

指定认证范围, 该字段可选。如果未指定scope，则用户认证成功后获得一个unscoped token，
当用户需要访问指定项目的资源时，需要通过该unscope token进行认证，获得该项目scope的token
目前只支持Project scope的token

示例

{
    "auth": {
        "context": {
            "ip": "string",
            "source": "string"
        },
        "identity": {
            "access_key_secret": "string",
            "cas_ticket": {
                "id": "string",
                "service": "string"
            },
            "id": "string",
            "methods": [
                "string"
            ],
            "mobile": {
                "contact_type": "string",
                "uid": "string",
                "verify_code": "string"
            },
            "oauth2": {
                "code": "string"
            },
            "oidc_auth": {
                "code": "string",
                "redirect_uri": "string"
            },
            "password": {
                "user": {
                    "Domain": {
                        "id": "string",
                        "name": "string"
                    },
                    "id": "string",
                    "name": "string",
                    "password": "string"
                }
            },
            "saml_auth": {
                "response": "string"
            },
            "token": {
                "id": "string"
            }
        },
        "scope": {
            "domain": {
                "id": "string",
                "name": "string"
            },
            "project": {
                "domain": {
                    "id": "string",
                    "name": "string"
                },
                "id": "string",
                "name": "string"
            }
        }
    }
}

示例代码

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

返回响应

🟢200成功

application/json

Body

token

object (KeystoneTokenV3)

可选

access_key

object (SAccessKeySecretInfo)

可选

catalog

array[object (KeystoneServiceV3) {4}]

可选

context

object (SAuthContext)

可选

expires_at

string <date-time>

token过期时间

可选

is_domain

boolean

可选

是否为域的token

issued_at

string <date-time>

token颁发时间

可选

methods

array[string]

可选

获取token的认证方式

policies

object (KeystonePolicy)

可选

project

object (KeystoneProjectV3)

可选

projects

array[object (KeystoneProjectV3) {3}]

可选

当用户认证时未指定scope时，会返回该用户所有的项目

role_assignments

array[object (SRoleAssignment) {5}]

可选

返回用户在所有项目的所有角色信息

roles

array[object (SIdentityObject) {2}]

可选

token的关联用户在关联项目的角色列表，只有项目scope的token才有这个属性

user

object (KeystoneUserV3)

可选

示例

{
    "token": {
        "access_key": {
            "AccessKey": "string",
            "expire": 0,
            "secret": "string"
        },
        "catalog": [
            {
                "endpoints": [
                    {
                        "id": "75f4e36100184a5a8a3e36cb0f12aa87",
                        "interface": "string",
                        "name": "string",
                        "region": "string",
                        "region_id": "string",
                        "url": "string"
                    }
                ],
                "id": "string",
                "name": "string",
                "type": "string"
            }
        ],
        "context": {
            "ip": "string",
            "source": "string"
        },
        "expires_at": "2019-08-24T14:15:22Z",
        "is_domain": true,
        "issued_at": "2019-08-24T14:15:22Z",
        "methods": [
            "string"
        ],
        "policies": {
            "Domain": [
                "string"
            ],
            "Project": [
                "string"
            ],
            "System": [
                "string"
            ]
        },
        "project": {
            "Domain": {
                "id": "string",
                "name": "string"
            },
            "Id": "string",
            "Name": "string"
        },
        "projects": [
            {
                "Domain": {
                    "id": "string",
                    "name": "string"
                },
                "Id": "string",
                "Name": "string"
            }
        ],
        "role_assignments": [
            {
                "group": {
                    "domain": {
                        "id": "string",
                        "name": "string"
                    },
                    "id": "string",
                    "name": "string"
                },
                "policies": {
                    "domain": [
                        "string"
                    ],
                    "project": [
                        "string"
                    ],
                    "system": [
                        "string"
                    ]
                },
                "role": {
                    "domain": {
                        "id": "string",
                        "name": "string"
                    },
                    "id": "string",
                    "name": "string"
                },
                "scope": {
                    "domain": {
                        "id": "string",
                        "name": "string"
                    },
                    "project": {
                        "domain": {
                            "id": "string",
                            "name": "string"
                        },
                        "id": "string",
                        "metadata": {
                            "property1": "string",
                            "property2": "string"
                        },
                        "name": "string"
                    }
                },
                "user": {
                    "domain": {
                        "id": "string",
                        "name": "string"
                    },
                    "id": "string",
                    "name": "string"
                }
            }
        ],
        "roles": [
            {
                "id": "string",
                "name": "string"
            }
        ],
        "user": {
            "Displayname": "string",
            "Domain": {
                "id": "string",
                "name": "string"
            },
            "Email": "string",
            "Id": "string",
            "IsSystemAccount": true,
            "Mobile": "string",
            "Name": "string",
            "PasswordExpiresAt": "2019-08-24T14:15:22Z"
        }
    }
}