You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "pierrejeambrun (via GitHub)" <gi...@apache.org> on 2025/09/01 13:18:10 UTC
[I] Authentication flow not working with httpOnly cookies [airflow]
pierrejeambrun opened a new issue, #55143:
URL: https://github.com/apache/airflow/issues/55143
### Body
_No response_
### Committer
- [x] I acknowledge that I am a maintainer/committer of the Apache Airflow project.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "Steexyz (via GitHub)" <gi...@apache.org>.
Steexyz commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3275754077
I'd like to better understand if that's the cause of my issue right now, so I have a question.
I'm deploying Airflow to a GKE cluster and when port forwarding in order to access the UI.
`gcloud container clusters get-credentials gke-n-cdpairflow-nane1 --region REGION --project PROJECT \
&& kubectl port-forward --namespace airflow $(kubectl get pod --namespace airflow --selector="component=api-server,release=airflow,tier=airflow" --output jsonpath='{.items[0].metadata.name}') 8080:8080`
When trying to access the UI after I'm getting this error message:
`{"detail":"Invalid or unsafe next URL"}`
The URL being accessed is:
https://hostname.cs-us-east1-rtep.cloudshell.dev/api/v2/auth/login?next=https%3A%2F%2Fhostname.cs-us-east1-rtep.cloudshell.dev%2Fapi%2Fv2%2Fauth%2Flogin
<img width="452" height="99" alt="Image" src="https://github.com/user-attachments/assets/0b283cc9-d647-4c7d-9138-2428f9c10063" />
<img width="1913" height="276" alt="Image" src="https://github.com/user-attachments/assets/7275fce5-f816-4216-8c12-137799c9d149" />
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck closed issue #55143: UI - Authentication flow not working with httpOnly cookies
URL: https://github.com/apache/airflow/issues/55143
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3242362289
cc: @potiuk @vincbeck
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3275782669
I started this issue to track that: https://github.com/apache/airflow/issues/55473
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3242361023
This is currently being discussed and will update once we find the best way to move forward.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3275775091
@Steexyz I would say that this is a different one. We enforce checks on the `next` url to ensure that it is safe to redirect the user to it. In your case it looks like the `next` url is safe, it's part of the same domain, but somehow isn't recognize as safe by our `is_safe_url`. I suspect that might be because of the param encoding.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] UI - Authentication flow not working with httpOnly cookies [airflow]
Posted by "Steexyz (via GitHub)" <gi...@apache.org>.
Steexyz commented on issue #55143:
URL: https://github.com/apache/airflow/issues/55143#issuecomment-3275791178
Thank you very much @pierrejeambrun !
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org