v3 token API

Also implemented the following:

blueprint pluggable-identity-authentication-handlers
blueprint stop-ids-in-uris
blueprint multi-factor-authn (just the plumbing)

What's missing?

* domain scoping (will be implemented by Henry?)

Change-Id: I191c0b2cb3367b2a5f8a2dc674c284bb13ea97e3

1 files changed, 18 insertions, 0 deletions

diff --git a/keystone/exception.py b/keystone/exception.py
index 5060dbfd..017db27f 100644
--- a/keystone/exception.py
+++ b/keystone/exception.py
@@ -114,6 +114,24 @@ class Unauthorized(SecurityError):
     title = 'Not Authorized'
 
 
+class AuthPluginException(Unauthorized):
+    """ Authentication plugin error. """
+    authentication = {}
+
+
+class AuthMethodNotSupported(AuthPluginException):
+    """ Attempted to authenticate with an unsupported method. """
+    authentication = {'methods': CONF.auth.methods}
+
+
+class AdditionalAuthRequired(AuthPluginException):
+    """ Additional authentications steps required. """
+
+    def __init__(self, auth_response=None, **kwargs):
+        super(AdditionalAuthRequired, self).__init__(message=None, **kwargs)
+        self.authentication = auth_response
+
+
 class Forbidden(SecurityError):
     """You are not authorized to perform the requested action."""
     code = 403