def on_get(self, req, resp):
        toks = [req.get_header('X-Auth-Token'),  # the token who sent request
                req.get_header('X-Subject-Token')]  # the token to be validated
        token_id_driver = identity.token_id_driver()
        tokens = identity.token_driver()
        validated_tokens = []
        for token_id in toks:
            token = token_id_driver.token_from_id(token_id)
            tokens.validate_token(token)
            validated_tokens.append(token)

        access = get_access_v3(toks[1], validated_tokens[1],
                               tokens.user_id(validated_tokens[1]),
                               tokens.username(validated_tokens[1]))

        if 'nocatalog' not in req.query_string:
            # Add catalog to the access data
            catalog = self._build_catalog(validated_tokens[1],
                                          tokens.user_id(validated_tokens[1]))
            access['token']['catalog'] = catalog

        resp.status = 200
        resp.set_header('X-Auth-Token', toks[0])
        resp.set_header('X-Subject-Token', toks[1])
        # V2 APIs return the body in 'access' keypair but V3 APIs do not
        # resp.body = {'access': access}
        resp.body = access
dataset/ETHPy150Open softlayer/jumpgate/jumpgate/identity/drivers/sl/auth_tokens_v3.py/AuthTokensV3.on_get/original