[PR] Widen revoked_token.jti to store external-issuer token identifiers [airflow]

["pierrejeambrun (via GitHub)" <gi...@apache.org>]

pierrejeambrun opened a new pull request, #73562:
URL: https://github.com/apache/airflow/pull/73562

   The `revoked_token.jti` column stores the JWT `jti` (token identifier) recorded when a token is revoked. It was sized `String(32)` to fit Airflow's own `uuid4().hex` identifiers.
   
   External identity providers accepted through `[api_auth] trusted_jwks_url` mint longer `jti` claims — RFC 4122 UUIDs are 36 characters, and other issuers use longer opaque identifiers. These overflow the 32-character column and raise a `DataError` on databases that enforce length (PostgreSQL, MySQL), so those tokens could not be recorded in the table.
   
   This widens the column to `String(255)`, which fits any realistic identifier while staying within the MySQL primary-key index limit, and adds the corresponding migration.
   
   ---
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes — Claude Code (Opus 4.8)
   
   Generated-by: Claude Code (Opus 4.8) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Widen revoked_token.jti to store external-issuer token identifiers [airflow]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #73562:
URL: https://github.com/apache/airflow/pull/73562


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org