(airflow) branch fix-webserver-error created (now 4c8c8024b86)

[ra...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rahulvats pushed a change to branch fix-webserver-error
in repository https://gitbox.apache.org/repos/asf/airflow.git


      at 4c8c8024b86 Fixing 500 error on webserver after upgrading to FAB provider 1.5.4

This branch includes the following new commits:

     new 4c8c8024b86 Fixing 500 error on webserver after upgrading to FAB provider 1.5.4

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(airflow) 01/01: Fixing 500 error on webserver after upgrading to FAB provider 1.5.4

[ra...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rahulvats pushed a commit to branch fix-webserver-error
in repository https://gitbox.apache.org/repos/asf/airflow.git

commit 4c8c8024b86a167599fd31dac0909fcdebcd1b5a
Author: vatsrahul1001 <ra...@gmail.com>
AuthorDate: Tue Feb 24 20:03:17 2026 +0530

    Fixing 500 error on webserver after upgrading to FAB provider 1.5.4
---
 airflow/www/session.py | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/airflow/www/session.py b/airflow/www/session.py
index 41cfbef8496..c85db73af15 100644
--- a/airflow/www/session.py
+++ b/airflow/www/session.py
@@ -16,6 +16,7 @@
 # under the License.
 from __future__ import annotations
 
+import logging
 from typing import TYPE_CHECKING
 
 from flask import request
@@ -24,7 +25,11 @@ from flask.sessions import SecureCookieSessionInterface
 from flask_session.sqlalchemy import SqlAlchemySessionInterface
 
 if TYPE_CHECKING:
+    from flask import Flask
     from flask_session import Session
+    from werkzeug.wrappers import Request
+
+log = logging.getLogger(__name__)
 
 
 class SessionExemptMixin:
@@ -39,6 +44,10 @@ class SessionExemptMixin:
         return super().save_session(*args, **kwargs)
 
 
+class _SessionDeserializeError(Exception):
+    """Sentinel raised when session data cannot be deserialized."""
+
+
 class AirflowTaggedJSONSerializer(TaggedJSONSerializer):
     """
     Adapter of flask's serializer for flask-session.
@@ -56,7 +65,10 @@ class AirflowTaggedJSONSerializer(TaggedJSONSerializer):
 
     def decode(self, data: bytes) -> Session:
         """Deserialize the session data."""
-        return self.loads(data.decode())
+        try:
+            return self.loads(data.decode())
+        except Exception as e:
+            raise _SessionDeserializeError() from e
 
 
 class AirflowDatabaseSessionInterface(SessionExemptMixin, SqlAlchemySessionInterface):
@@ -66,6 +78,21 @@ class AirflowDatabaseSessionInterface(SessionExemptMixin, SqlAlchemySessionInter
         super().__init__(*args, **kwargs)
         self.serializer = AirflowTaggedJSONSerializer()
 
+    def open_session(self, app: Flask, request: Request):
+        """
+        Open the session, starting a fresh one if the stored data cannot be deserialized.
+
+        Session data serialized by an older flask-session version (<0.8.0)
+        cannot be read after an upgrade. Rather than letting the error propagate and leave
+        ctx.session as None, we discard the unreadable session and issue a new one.
+        """
+        try:
+            return super().open_session(app, request)
+        except _SessionDeserializeError:
+            log.warning("Failed to deserialize session data, starting a fresh session.", exc_info=True)
+            sid = self._generate_sid(self.sid_length)
+            return self.session_class(sid=sid, permanent=self.permanent)
+
 
 class AirflowSecureCookieSessionInterface(SessionExemptMixin, SecureCookieSessionInterface):
     """Session interface that exempts some routes and stores session data in a signed cookie."""