[GitHub] XD-DENG commented on a change in pull request #4612: [AIRFLOW-3785] Decommission airflow/contrib/auth/backends

[GitBox <gi...@apache.org>]

XD-DENG commented on a change in pull request #4612: [AIRFLOW-3785] Decommission airflow/contrib/auth/backends
URL: https://github.com/apache/airflow/pull/4612#discussion_r251900752
 
 

 ##########
 File path: docs/api.rst
 ##########
 @@ -118,17 +118,7 @@ Airflow webserver is publicly accessible, and you should probably use the deny a
     [api]
     auth_backend = airflow.api.auth.backend.deny_all
 
-Two "real" methods for authentication are currently supported for the API.
-
-To enabled Password authentication, set the following in the configuration:
-
-.. code-block:: bash
-
-    [api]
-    auth_backend = airflow.contrib.auth.backends.password_auth
-
-It's usage is similar to the Password Authentication used for the Web interface.
-
+Kerberos authentication is supported for the API as well.
 To enable Kerberos authentication, set the following in the configuration:
 
 Review comment:
   Yes, that’s my understanding. Unless we keep models.User only for this contrib.auth.backends.password_auth (which is not making sense to me).
   
   The same situation for webserver authentication. Quite a few auth options are no longer applicable.
   
   Let’s check these changes carefully and ensures no wrong deletion is done. On the other hand, we may want to start adding more doc/examples for the FAB UI, like how OAuth or LDAP auth can be done under FAB UI.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services