You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "Ivan Grbavac (Jira)" <ji...@apache.org> on 2021/06/16 06:43:00 UTC
[jira] [Commented] (AIRFLOW-4155) Logging in with Public role
triggers infinite redirect loop
[ https://issues.apache.org/jira/browse/AIRFLOW-4155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17364094#comment-17364094 ]
Ivan Grbavac commented on AIRFLOW-4155:
---------------------------------------
Ran into the same issue.
When {{Viewer}} is set for the {{AUTH_ROLE_PUBLIC}} setting it worked. Obviously, to much information was shown.
To replicate behavior of 1.10.15 i found that {{can read on Website}} needs to be added to the {{Public}} role.
That will break the redirect cycle.
The same permission is present on the {{Viewer}} role in Airflow 2.1.0, but it does not even exist in default permissions on 1.10.15.
> Logging in with Public role triggers infinite redirect loop
> -----------------------------------------------------------
>
> Key: AIRFLOW-4155
> URL: https://issues.apache.org/jira/browse/AIRFLOW-4155
> Project: Apache Airflow
> Issue Type: Improvement
> Reporter: Andrew Stahlman
> Assignee: Andrew Stahlman
> Priority: Major
>
> After a user registers in the PUBLIC_AUTH_ROLE they are redirected to /home. But a user in the Public role still doesn't have view privileges on /home, so they are immediately redirected *back* to the /login page, which creates an endless redirect cycle.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)