René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Support object_storage_url override","articleBody":"Generally, the object_storage_url is built from `OS_AUTH_URL`, `OS_PROJECT_ID` and other similar variable. In php-opencloud/openstack it's retrieved from the JSON payload obtained from `POST /v3/auth/tokens` (in `token.catalog.endpoints[type==\"object-store\"][interface == \"xx\"].url`)\r\n \r\nStill, the Python Swift client allows for another alternative: [OS_STORAGE_URL](https://github.com/openstack/python-swiftclient/blob/master/swiftclient/client.py#L785)\r\n\r\nThis allows to use a distinct storage-url unrelated from said variable.\r\n\r\nThis is useful (= actually _necessary_) in the context of **application credentials,** where an application credential is generated within a given project, but used to access an object container in another project (whose ACLs have been configured). In such a case we can't rely on the URL generation logic.\r\n\r\nThis is need to give a use for cross-projects https://github.com/php-opencloud/openstack/pull/336\r\nLet's remind that some Openstack hosting solution do not offer multiple users, but only multiple projects, making cross-project application credentials the only secure way to grant access to an object container which implies supporting the OS_STORAGE_URL override.\r\n\r\n\r\nIn a more generic way, it means giving  the ability to override `OpenStack\\Identity\\v3\\Models\\Service::getUrl()` from the configuration (this class as not access to)","author":{"url":"https://github.com/drzraf","@type":"Person","name":"drzraf"},"datePublished":"2022-01-13T16:51:09.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/341/openstack/issues/341"}