AIP-84 Support Auth Backends for API authentication

[pierrejeambrun]

Body

Subtask of the meta issue #42360

Committer

• I acknowledge that I am a maintainer/committer of the Apache Airflow project.

[bugraoz93]

Do you think this is related? I am creating a similar thing with SimpleAuthManager. It is the same endpoint with different expirations in SimpleAuthManager. For this, it will be a bit different but will have a /token endpont at the end.
#47043

[bugraoz93]

If it is, I can expand the scope and cover regular auth, too.

[vincbeck]

No it is not the same thing. This task is about keeping support for auth backends: https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/api-authentication.html. These are used by users to call Rest API. Today, auth backends are not supported in AF3 but we should

[bugraoz93]

Cool, thanks for the details! This means integrating FAB with Fastapi right? Since the FAB is now persisting other Auth Methods?

[vincbeck]

Actually, after looking at your PR (the one that introduce the createToken endpoint in FAB) we could use that indeed. User would need to use that API to get a JWT token and then use the token to call the Rest API. That would simplify everything I guess.

[bugraoz93]

Actually, after looking at your PR (the one that introduce the createToken endpoint in FAB) we could use that indeed. User would need to use that API to get a JWT token and then use the token to call the Rest API. That would simplify everything I guess.

Amazing! Indeed, my idea was to keep it consistent and follow up similar things with SimpleAuthManager. Glad to hear it! :) I agree, it can make things straightforward. It can reduce the implementation effort too due to # of integrations. This can support all methods, out of the box. Then we can consider making it more sophisticated and automated.

I will include the '/token` endpoint as well. At the end of the PR, it should be ready to integrate into the API without much effort.