Swagger gives 401 unauthenticated with SimpleAuthManager

[dstandish]

Body

API swagger gives you 401 not authenticated with this combination...

export AIRFLOW__CORE__AUTH_MANAGER=airflow.api_fastapi.auth.managers.simple.simple_auth_manager.SimpleAuthManager
export AIRFLOW__CORE__SIMPLE_AUTH_MANAGER_ALL_ADMINS=True

Committer

• I acknowledge that I am a maintainer/committer of the Apache Airflow project.

[rawwar]

@dstandish , I am unable to replicate this issue. I've used breeze and have set the env vars you mentioned, and I can still access it:

[rawwar]

Ah, I think you were commenting about the API calls. I can see that API calls are returning 401.

[rawwar]

@dstandish , including jwt token is mandatory even when AIRFLOW__CORE__SIMPLE_AUTH_MANAGER_ALL_ADMINS is set to True. In this case, we need to get the token from /auth/token and use it

@pierrejeambrun , what do you think of extending OAuth2PasswordBearer to include additional case where we allow users to make API calls without auth header only when using SAM with AIRFLOW__CORE__SIMPLE_AUTH_MANAGER_ALL_ADMINS=True?

Currently, this code raises 401 error when auth header is not present. In our case, we can at least allow it when using SAM. WDYT?

[pierrejeambrun]

Why not, we can always extend the auth scheme to add handle this.

[vatsrahul1001]

We already have a open issue for this #47582

[rawwar]

After thinking this through, Easy way seems to be to just add a middleware that's going to generate the token for the anonymous user we created when simple_auth_manager_all_admins is set to True

[rawwar]

reference comment that I found useful to add token to header in a middleware - fastapi/fastapi#2727 (comment)