You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "andrii-korotkov-verkada (via GitHub)" <gi...@apache.org> on 2024/12/26 15:48:09 UTC
[I] Support OAuth2 directly with Authlib without relying on Flask AppBuilder [airflow]
andrii-korotkov-verkada opened a new issue, #45219:
URL: https://github.com/apache/airflow/issues/45219
### Description
Make it possible to have OAuth2 without depending on Flask AppBuilder, e.g. for Okta.
### Use case/motivation
Examples for Okta rely on Flask AppBuilder for OAuth2 support. With Airflow 3 not using Flask, it'd be beneficial to support OAuth2 without relying on Flash libs. In particular, Flask AppBuilder uses Authlib https://flask-appbuilder.readthedocs.io/en/latest/security.html#authentication-oauth, so we might be able to use it directly.
### Related issues
_No response_
### Are you willing to submit a PR?
- [X] Yes I am willing to submit a PR!
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Support OAuth2 directly with Authlib without relying on Flask AppBuilder [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #45219:
URL: https://github.com/apache/airflow/issues/45219#issuecomment-2562974099
We are not going to build in all the kind of authentication mechanims in Airflow 3 - we are moving away from those mechanisms being effectively "embedded" to be "externalized". We already separated AuthManager interface in Airflow 2 and it's further re-inforced In Airflow 3 where we have a plan to support KeyCloak as external authentication mechanims and building KeyCloak Authentication mechanism.
In fact we are looking for someone volunteering and contributing back KeyCloak Auth Manager to implement it (with a fallback we are going to keep to be FAB). Airflow 3 is deliberatly **not** going to depend on Flask nor Flask App Builder - instead FAB provider is going to be the only "dependency" to those and it will be swappable with another implementation of Auth Manager.
If you would like to implement such KeyCloak AuthManager, you are absolutely free to do so. See https://cwiki.apache.org/confluence/display/AIRFLOW/AIP-56+Extensible+user+management and "keycloak auth manager" section.
Converting it into discussion if more needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Support OAuth2 directly with Authlib without relying on Flask AppBuilder [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk closed issue #45219: Support OAuth2 directly with Authlib without relying on Flask AppBuilder
URL: https://github.com/apache/airflow/issues/45219
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org