You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2021/01/08 18:20:28 UTC

[GitHub] [airflow] mdcsaenz opened a new issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

mdcsaenz opened a new issue #13573:
URL: https://github.com/apache/airflow/issues/13573


   Greetings, I am currently using dockerfile 1.10.12-python3.6 from ya'll. With the helmchart https://github.com/airflow-helm/charts/tree/main/charts/airflow. 
   
   I currently get this error
   ![Screen Shot 2021-01-08 at 12 12 18 PM](https://user-images.githubusercontent.com/8727557/104049565-c8cb7800-51aa-11eb-89d5-7ba850d681aa.png)
   
   My setup is this for my webserver config
   ```
    from flask_appbuilder.security.manager import AUTH_OAUTH
       AUTH_TYPE = AUTH_OAUTH
       AUTH_USER_REGISTRATION = False
       #AUTH_USER_REGISTRATION_ROLE = "Admin"
       AUTH_ROLE_ADMIN = 'Admin'
       OAUTH_PROVIDERS = [{
           'name':'google',
           'token_key':'access_token',
           'icon':'fa-google',
           'remote_app': {
               'base_url':'https://www.googleapis.com/oauth2/v2/',
               'request_token_params':{
                   'scope': 'email profile'
               },  
               'access_token_url':'https://oauth2.googleapis.com/token',
               'authorize_url':'https://accounts.google.com/o/oauth2/auth',
               'request_token_url': None,
               'consumer_key': '<client_id_from_google>',
               'consumer_secret': '<client_secret_from_google>,
   ```
   
   My config for airflow is:
   ```
     config:
         ## Security
         AIRFLOW__CORE__SECURE_MODE: "True"
         AIRFLOW__WEBSERVER__AUTH_BACKEND: "airflow.contrib.auth.backends.google_auth"
         AIRFLOW__WEBSERVER__EXPOSE_CONFIG: "False"
         AIRFLOW__WEBSERVER__RBAC: "True"
         AIRFLOW__WEBSERVER__AUTHENTICATE: "True"
         AIRFLOW__CORE__LOAD_DEFAULT_CONNECTIONS: "False"
         ## DAGS
         AIRFLOW__SCHEDULER__DAG_DIR_LIST_INTERVAL: "40"
         ## GCP Remote Logging
         AIRFLOW__CORE__REMOTE_LOGGING: "True"
         AIRFLOW__CORE__REMOTE_BASE_LOG_FOLDER: "gs://airflow-logs"
         AIRFLOW__CORE__REMOTE_LOG_CONN_ID: "google_cloud_airflow"
         ## Disable noisy "Handling signal: ttou" Gunicorn log messages
         GUNICORN_CMD_ARGS: "--log-level WARNING"
         ## GOOGLE TEST
         AIRFLOW__GOOGLE__OAUTH_CALLBACK_ROUTE: "/oauth2callback"
         AIRFLOW__GOOGLE__DOMAIN: "mycompany.com"
   ```
   
   This issue was also mentioned here: https://stackoverflow.com/questions/64654884/airflow-google-oauth-failing
   I followed this: https://airflow.apache.org/docs/apache-airflow/1.10.12/security.html  to do my setup.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] AmarEL commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
AmarEL commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-762810986


   I'm using the following config for google auth for version 1.10.12
   
   ```
   [webserver]
   authenticate = True
   auth_backend = airflow.contrib.auth.backends.google_auth
   
   [google]
   auth_callback_route = /oauth2callback
   ```
   
   And there is my webserver_config.py file:
   
   ```
   OAUTH_PROVIDERS = [{
       'name': 'google',
       'token_key': 'access_token',
       'icon': 'fa-google',
       'remote_app': {
           'base_url': 'https://www.googleapis.com/oauth2/v2/',
           'request_token_params': {
               'scope': 'email profile'
           },
           'access_token_url': 'https://accounts.google.com/o/oauth2/token',
           'authorize_url': 'https://accounts.google.com/o/oauth2/auth',
           'request_token_url': None,
           'consumer_key': '<client_id_from_google>',
           'consumer_secret': '<client_secret_from_google>
       }
   }]
   ```
   
   Can you give a shot with these configs?
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] blag commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
blag commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-982173619


   @mdcsaenz Did you get this working?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] mdcsaenz commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
mdcsaenz commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-989284864


   Closing b/c it led to me  putting this issue https://github.com/apache/airflow/issues/16783


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] mdcsaenz closed issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
mdcsaenz closed issue #13573:
URL: https://github.com/apache/airflow/issues/13573


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] mdcsaenz commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
mdcsaenz commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-799486749


   Ill give this a shot. Thank you.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] boring-cyborg[bot] commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
boring-cyborg[bot] commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-756919682


   Thanks for opening your first issue here! Be sure to follow the issue template!
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] boring-cyborg[bot] commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
boring-cyborg[bot] commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-756919682


   Thanks for opening your first issue here! Be sure to follow the issue template!
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] mdcsaenz edited a comment on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
mdcsaenz edited a comment on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-758111600


   Wanted to see anyone has an idea what this might be? Also, my main domain is something.com, however I am using a subdomain for my airflow, a.something.com. Not sure if the invalidation is coming from the OAuth want something.com as the main domain. Please advise.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [airflow] mdcsaenz commented on issue #13573: Airflow Google oAuth failing with Invalid response from google on 1.10.12-python3.6

Posted by GitBox <gi...@apache.org>.
mdcsaenz commented on issue #13573:
URL: https://github.com/apache/airflow/issues/13573#issuecomment-758111600


   Wanted to see anyone has an idea what this might be? Thank you.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org