Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Housekeeping of auth backend & Update Security doc #8071

Merged
merged 1 commit into from
Apr 3, 2020

Conversation

XD-DENG
Copy link
Member

@XD-DENG XD-DENG commented Apr 2, 2020

  • All authentication backends in airflow/contrib/auth are base on the user model which has already been removed earlier ([AIRFLOW-3761] Decommission User & Chart models & Update doc accordingly #4577)
  • Security related documentation is out-dated, especially the LDAP and OAuth integration sections. It still directs user to the configuration of "old" web UI which has already been removed in master branch, while we should refer to the FAB doc instead.

Issue link: WILL BE INSERTED BY boring-cyborg

Make sure to mark the boxes below before creating PR: [x]


In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.
Read the Pull Request Guidelines for more information.

- All authentication backends in `airflow/contrib/auth`
  are base on the `user` model which has already been
  removed earlier (apache#4577 (comment))
- Security related documentation is out-dated,
  especially the LDAP and OAuth integration sections.
  It still directs user to the configuration of "old" web UI
  which has already been removed in master branch.
@XD-DENG
Copy link
Member Author

XD-DENG commented Apr 2, 2020

Hi @kaxil @potiuk @zhongjiajie , this is the change I mentioned in our earlier discussion #4577 (comment) .

I will raise another PR to address similar issue (out-dated documentation) for 1-10-x branch.

@potiuk
Copy link
Member

potiuk commented Apr 3, 2020

Is the code really out-dated :)? I did not realise that :)

@XD-DENG
Copy link
Member Author

XD-DENG commented Apr 3, 2020

@potiuk It will be great if you can help take another further look and confirm.

The main reasoning is all of the contrib/auth backends are based on models.User, while models.User is already removed. But yes let's be careful about this.

Copy link
Member

@potiuk potiuk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Makes sense. Looks good.

@XD-DENG XD-DENG merged commit 3a7b741 into apache:master Apr 3, 2020
@XD-DENG XD-DENG deleted the cleanup-security branch April 3, 2020 16:20
kaxil added a commit to astronomer/airflow that referenced this pull request Jun 20, 2020
apache#8071 removed Auth Backend but didn't remove some functions used by those method.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants