-
DescriptionFollow up to #35131/#35237 which updated the docs to list which OIDC Providers are supported in the code. This request is to add support for generic oidc providers. There are a number of smaller OIDC Providers that would be awesome to allow authentication through. Authentik, Discord, Authelia, AWS Cognito, and the growing number of alternatives. As the previous ticket points out, the current implementation is limited to the case statement in get_oauth_user_info function located here: https://github.com/apache/airflow/blob/2.9.0/airflow/providers/fab/auth_manager/security_manager/override.py#L2169-L2276 It would be awesome to have that extended to cover additional providers. Use case/motivationWould like to use Authenik to access AirTables Related issuesAre you willing to submit a PR?
Code of Conduct
|
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
|
Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval. |
Beta Was this translation helpful? Give feedback.
-
|
As explained in the other tickets - this is a request to Flask Application Builder - not to Airlfow. Airflow uses Flask Application Builder to implement those https://github.com/dpgaspar/Flask-AppBuilder . irflow is periodically syncing with what gets implemented in FAB - so I think you can open your issue there. It might be in the future we will have a generic AuthManager (Keycloak based) replacing FAB Auth Manager as we have today. The interface is already implemented - Airflow is looking for a contibution of an implementation (possibly based on KeyCloak https://cwiki.apache.org/confluence/display/AIRFLOW/AIP-56+Extensible+user+management) Conveting to a Discussion if more is needed. |
Beta Was this translation helpful? Give feedback.
-
|
Marking this as solved I missed that piece in the previous conversation. Thanks for the clarification and the additional context with how the internals work. Really appreciate the links to the decision records. |
Beta Was this translation helpful? Give feedback.
As explained in the other tickets - this is a request to Flask Application Builder - not to Airlfow. Airflow uses Flask Application Builder to implement those https://github.com/dpgaspar/Flask-AppBuilder . irflow is periodically syncing with what gets implemented in FAB - so I think you can open your issue there.
It might be in the future we will have a generic AuthManager (Keycloak based) replacing FAB Auth Manager as we have today. The interface is already implemented - Airflow is looking for a contibution of an implementation (possibly based on KeyCloak https://cwiki.apache.org/confluence/display/AIRFLOW/AIP-56+Extensible+user+management)
Conveting to a Discussion if more is needed.