(airflow) branch main updated: Update security_model.rst to clear unauthenticated endpoints exceptions (#42057)

[js...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jscheffl pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new 6f0af8879f Update security_model.rst to clear unauthenticated endpoints exceptions (#42057)
6f0af8879f is described below

commit 6f0af8879fbfdf925b0d5840df95eead94f6ec52
Author: SaurabhhB <sa...@gmail.com>
AuthorDate: Sun Sep 8 02:56:34 2024 +0530

    Update security_model.rst to clear unauthenticated endpoints exceptions (#42057)
    
    * Update security_model.rst
    
    Fixing confusion on exception to unauthenticated endpoints.
    
    * Update security_model.rst
    
    Fixed grammar and spell mistakes.
    
    * Update docs/apache-airflow/security/security_model.rst
    
    * Update docs/apache-airflow/security/security_model.rst
    
    ---------
    
    Co-authored-by: Jarek Potiuk <ja...@potiuk.com>
---
 docs/apache-airflow/security/security_model.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/apache-airflow/security/security_model.rst b/docs/apache-airflow/security/security_model.rst
index 24bf7b8603..0181710bda 100644
--- a/docs/apache-airflow/security/security_model.rst
+++ b/docs/apache-airflow/security/security_model.rst
@@ -81,7 +81,7 @@ Non-authenticated UI users
 ..........................
 
 Airflow doesn't support unauthenticated users by default. If allowed, potential vulnerabilities
-must be assessed and addressed by the Deployment Manager.
+must be assessed and addressed by the Deployment Manager. However, there are exceptions to this. The ``/health`` endpoint responsible to get health check updates should be publicly accessible. This is because other systems would want to retrieve that information. Another exception is the ``/login`` endpoint, as the users are expected to be unauthenticated to use it.
 
 Capabilities of authenticated UI users
 --------------------------------------