X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=src%2Fceph%2Fsrc%2Frgw%2Frgw_auth_keystone.h;fp=src%2Fceph%2Fsrc%2Frgw%2Frgw_auth_keystone.h;h=0000000000000000000000000000000000000000;hb=7da45d65be36d36b880cc55c5036e96c24b53f00;hp=feef469cb080be8a0073a084c3bab180d65ea6c9;hpb=691462d09d0987b47e112d6ee8740375df3c51b2;p=stor4nfv.git

diff --git a/src/ceph/src/rgw/rgw_auth_keystone.h b/src/ceph/src/rgw/rgw_auth_keystone.h
deleted file mode 100644
index feef469..0000000
--- a/src/ceph/src/rgw/rgw_auth_keystone.h
+++ /dev/null
@@ -1,127 +0,0 @@
-// -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
-// vim: ts=8 sw=2 smarttab
-
-
-#ifndef CEPH_RGW_AUTH_KEYSTONE_H
-#define CEPH_RGW_AUTH_KEYSTONE_H
-
-#include <utility>
-#include <boost/optional.hpp>
-#include <boost/utility/string_view.hpp>
-
-#include "rgw_auth.h"
-#include "rgw_rest_s3.h"
-#include "rgw_common.h"
-#include "rgw_keystone.h"
-
-namespace rgw {
-namespace auth {
-namespace keystone {
-
-/* Dedicated namespace for Keystone-related auth engines. We need it because
- * Keystone offers three different authentication mechanisms (token, EC2 and
- * regular user/pass). RadosGW actually does support the first two. */
-
-class TokenEngine : public rgw::auth::Engine {
-  CephContext* const cct;
-
-  using acl_strategy_t = rgw::auth::RemoteApplier::acl_strategy_t;
-  using auth_info_t = rgw::auth::RemoteApplier::AuthInfo;
-  using result_t = rgw::auth::Engine::result_t;
-  using token_envelope_t = rgw::keystone::TokenEnvelope;
-
-  const rgw::auth::TokenExtractor* const extractor;
-  const rgw::auth::RemoteApplier::Factory* const apl_factory;
-  rgw::keystone::Config& config;
-  rgw::keystone::TokenCache& token_cache;
-
-  /* Helper methods. */
-  bool is_applicable(const std::string& token) const noexcept;
-  token_envelope_t decode_pki_token(const std::string& token) const;
-
-  boost::optional<token_envelope_t>
-  get_from_keystone(const std::string& token) const;
-
-  acl_strategy_t get_acl_strategy(const token_envelope_t& token) const;
-  auth_info_t get_creds_info(const token_envelope_t& token,
-                             const std::vector<std::string>& admin_roles
-                            ) const noexcept;
-  result_t authenticate(const std::string& token,
-                        const req_state* s) const;
-
-public:
-  TokenEngine(CephContext* const cct,
-              const rgw::auth::TokenExtractor* const extractor,
-              const rgw::auth::RemoteApplier::Factory* const apl_factory,
-              rgw::keystone::Config& config,
-              rgw::keystone::TokenCache& token_cache)
-    : cct(cct),
-      extractor(extractor),
-      apl_factory(apl_factory),
-      config(config),
-      token_cache(token_cache) {
-  }
-
-  const char* get_name() const noexcept override {
-    return "rgw::auth::keystone::TokenEngine";
-  }
-
-  result_t authenticate(const req_state* const s) const override {
-    return authenticate(extractor->get_token(s), s);
-  }
-}; /* class TokenEngine */
-
-
-class EC2Engine : public rgw::auth::s3::AWSEngine {
-  using acl_strategy_t = rgw::auth::RemoteApplier::acl_strategy_t;
-  using auth_info_t = rgw::auth::RemoteApplier::AuthInfo;
-  using result_t = rgw::auth::Engine::result_t;
-  using token_envelope_t = rgw::keystone::TokenEnvelope;
-
-  const rgw::auth::RemoteApplier::Factory* const apl_factory;
-  rgw::keystone::Config& config;
-  rgw::keystone::TokenCache& token_cache;
-
-  /* Helper methods. */
-  acl_strategy_t get_acl_strategy(const token_envelope_t& token) const;
-  auth_info_t get_creds_info(const token_envelope_t& token,
-                             const std::vector<std::string>& admin_roles
-                            ) const noexcept;
-  std::pair<boost::optional<token_envelope_t>, int>
-  get_from_keystone(const boost::string_view& access_key_id,
-                    const std::string& string_to_sign,
-                    const boost::string_view& signature) const;
-  result_t authenticate(const boost::string_view& access_key_id,
-                        const boost::string_view& signature,
-                        const string_to_sign_t& string_to_sign,
-                        const signature_factory_t&,
-                        const completer_factory_t& completer_factory,
-                        const req_state* s) const override;
-public:
-  EC2Engine(CephContext* const cct,
-            const rgw::auth::s3::AWSEngine::VersionAbstractor* const ver_abstractor,
-            const rgw::auth::RemoteApplier::Factory* const apl_factory,
-            rgw::keystone::Config& config,
-            /* The token cache is used ONLY for the retrieving admin token.
-             * Due to the architecture of AWS Auth S3 credentials cannot be
-             * cached at all. */
-            rgw::keystone::TokenCache& token_cache)
-    : AWSEngine(cct, *ver_abstractor),
-      apl_factory(apl_factory),
-      config(config),
-      token_cache(token_cache) {
-  }
-
-  using AWSEngine::authenticate;
-
-  const char* get_name() const noexcept override {
-    return "rgw::auth::keystone::EC2Engine";
-  }
-
-}; /* class EC2Engine */
-
-}; /* namespace keystone */
-}; /* namespace auth */
-}; /* namespace rgw */
-
-#endif /* CEPH_RGW_AUTH_KEYSTONE_H */