airflow-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joy Gao (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRFLOW-2321) RBAC support from new UI's failing on OAuth authentication method
Date Fri, 13 Apr 2018 18:23:00 GMT

    [ https://issues.apache.org/jira/browse/AIRFLOW-2321?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16437700#comment-16437700
] 

Joy Gao commented on AIRFLOW-2321:
----------------------------------

Actually, looks like it's a separate issue, as the error message when a user is not in the
whitelist should be `You are not authorized.`  

 

> RBAC support from new UI's failing on OAuth authentication method
> -----------------------------------------------------------------
>
>                 Key: AIRFLOW-2321
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-2321
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: authentication
>            Reporter: Guillermo Rodríguez Cano
>            Priority: Major
>
> I tried configuring the RBAC support for the new webserver UI as provided thanks to this
[PR|https://github.com/apache/incubator-airflow/pull/3015] (solving AIRFLOW-1433 and AIRFLOW-85
issues) but I have encountered issues with OAuth as authentication method with Google as provider.
> I have no issues configuring the authentication details as pointed in the UPDATING document,
but when I test a fresh installation I manage to get to the Google authentication webpage
and on returning to Airflow's site I get the message: 'Invalid login. Please try again.' which
I have traced it down to coming from [here|https://github.com/dpgaspar/Flask-AppBuilder/blob/master/flask_appbuilder/security/views.py#L549].
> And as pointed it seems the user variable is None.
> I have tried to login using the standard DB authentication method without no problems.
The same issue happens even when I tried registering a new user, or with that user registered
via the DB authentication and then switching to OAUTH authentication method.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message