Merge pull request #9452 from swordqiu/hotfix/qj-invalid-token-fetch-policy-panic

fix(keystone): panic if request with an invalid token

pkg/cloudcommon/policy/policy.go

@@ -134,6 +134,9 @@ func getMaskedLoginIp(userCred mcclient.TokenCredential) string {
 }
 
 func policyKey(userCred mcclient.TokenCredential) string {
+	if userCred == nil || auth.IsGuestToken(userCred) {
+		return auth.GUEST_TOKEN
+	}
 	keys := []string{userCred.GetProjectId()}
 	roles := userCred.GetRoleIds()
 	if len(roles) > 0 {

pkg/mcclient/auth/middleware.go

@@ -69,6 +69,7 @@ func AuthenticateWithDelayDecision(f appsrv.FilterHandler, delayDecision bool) a
 					httperrors.UnauthorizedError(ctx, w, "InvalidToken")
 					return
 				}
+				token = &GuestToken
 			}
 		}
 		ctx = context.WithValue(ctx, appctx.APP_CONTEXT_KEY_AUTH_TOKEN, token)