use embedded URLs for hyperlinks in the README

This switches all hyperlinks to embedded links, from a much more fragile
indirect & anonymous approach (which happens to be completely broken
on Github).

Change-Id: I92700068c7d65b50c76ce6931bff3ebab4844a49
Closes-Bug: 1335968
Use keystoneclient.exceptions

keystoneclient.apiclient.exceptions is deprecated.
Instead keystoneclient.exceptions should be used.

Change-Id: I546defeac5c2a1f4d3e68885e45019a6a6ecb027
Redact tokens in request headers

Tokens shouldn't be logged since a token could be gathered from a
log file and used. The client was logging the X-Auth-Token and
X-Subject-Token request headers. With this change, the X-Auth-Token
and X-Subject-Token are shown as "TOKEN_REDACTED".

Also, the "Authentication" header is also redacted.

This is for security hardening.

SecurityImpact

Closes-Bug: #1004114
Closes-Bug: #1327019

Change-Id: I1edc3821ed028471102cc9b95eb9f3b54c9e2778
List federated projects and domains

Add calls for utilizing ``/OS-FEDERATION/projects`` and
``/OS-FEDERATION/domains``.

Change-Id: I670c1f284c1980e2258881caf51801ea66645c4a
Use config fixture from oslo.config

With the release of oslo.config 1.4.0.0a1, oslo.config
contains the config fixture. python-keystoneclient was using
the config fixture in oslo-incubator's fixture module. With
this change python-keystoneclient is using the config fixture
in oslo.config

Change-Id: Id03efdfbe8893c48a9ad65f0cf59e1dbae03dc47
Config fixture from oslo-incubator is not used.

Keystoneclient doesn't use the config fixture, so remove it from
openstack-common.conf and re-sync to remove it.

Change-Id: I9cf85a0bbbceb4c36e6ec968b19f34bb0716be95
Merge "use embedded URLs for hyperlinks in the README"
Use token and discovery fixture in identity tests

Replace a bunch of copied token data by using the fixtures available in
client.

Change-Id: Iec2e75cb4ffe9cec0396e9d8ec21a5e3c6816af7
Control identity plugin reauthentication

Identity plugins will by default re-authenticate themselves if they are
about to expire. This is generally correct however there are times where
this re-authentication doesn't make sense and we should be able to
prevent it.

Closes-Bug: #1352051
Change-Id: I66b50b1e650501e7f076139895473e8d1791ce27
Merge "Redact tokens in request headers"
Merge "Use keystoneclient.exceptions"
Add docs for how to create an OAuth auth instance

Similar to the other authentication methods that were documented,
like password and token, this patch will add a brief description
on how to authenticate with the oauth1 plugin.

Change-Id: I1b7cceb116d337be71576139601f34ca17563a50
Mark the keystoneclient s3_token middleware deprecated

The s3_token middleware in python-keystoneclient is deprecated in
favor of keystonemiddleware.s3_token.

Change-Id: I30930f16425f1825373184371f3cba995833bc22
Merge "Use token and discovery fixture in identity tests"
Merge "Add docs for how to create an OAuth auth instance"
Add oslo.utils requirement

With the release of oslo.utils, keystoneclient can make use of it
rather than using the functions in oslo-utils.

Change-Id: I1b5392f10f8b67c9c3ac3bc3d2dd06ea08417aa6
Use oslo.utils

keystoneclient was using utility function from oslo-incubator
rather than oslo.utils.

Change-Id: I2909a2150b9556e54ef88e72358fda1cf8b7cc1c
expose the revoke token for V3

Implement the v3 revoke token method for CLI.

Change-Id: Ib01f6341e087866ca05862c200e6c783fb1a8ff5
Closes-Bug: #1331972
Merge "Control identity plugin reauthentication"
Fixes import grouping

Left over from https://review.openstack.org/107393

Change-Id: Ic495e0f929b07f285240305d98f7d0fa73ecffce