Keycloak auth manager: enforce team‑scoped authorization (AIP‑67)#61351

Merged

vincbeck merged 16 commits intoapache:mainfrom

stegololz:feature/keycloak-auth-multiteam-auth-manager

Feb 18, 2026

Commits on Feb 18, 2026

feat: update keycloak manager for multiteam setup
stegololz
committed
feat: refactor authorization checks for multi-team setup in KeycloakAuthManager
stegololz
committed
feat: refactor team name retrieval for multi-team support in KeycloakAuthManager
stegololz
committed
feat: update KeycloakAuthManager to retrieve multi-team configuration dynamically
stegololz
committed
Apply suggestion from @vincbeck

stegololz
and
vincbeck
committed
feat: added error handling for missing team_name in multi-team mode
stegololz
committed
generalize team-scoped auth cases and add compat guards
stegololz
committed
test(keycloak): gate multiteam auth manager tests on Airflow 3.2+
stegololz
committed
fix(keycloak): allow global team-scoped resources in multi-team mode
stegololz
committed
refactor(keycloak): inline resource name resolution in auth manager
stegololz
committed
test(keycloak): align multiteam skip reasons with 3.2.0 gate
stegololz
committed
Update providers/keycloak/src/airflow/providers/keycloak/auth_manager/keycloak_auth_manager.py

stegololz
and
vincbeck
committed
Made type of _get_team_name explicit
stegololz
committed
refactored/renamed multiteam tests
stegololz
committed
Updated test style to enhance readability
stegololz
committed
moved auth manager patch from a with block to a decorator
stegololz
committed