vincbeck commented on PR #34924: URL: https://github.com/apache/airflow/pull/34924#issuecomment-1769137290
> As far as I understand (and I might be wrong), currently the way how to configure backends in order to get the UI working is: airflow.api.auth.backend.basic_auth,airflow.api.auth.backend.session. This will allow the API user to use basic authentication, but also the React UI to communicate with the webserver via the same API (session). Does it mean that api_auth method of AuthManager will return array of auths as well? Or do we expect AuthManagers to return api_auth that will already handle session authentication ? Or maybe we will always append the "session" auth backend when we check for API - regardless from Auth Manager ? I could have missed that so sorry, If I am asking naive questions here :). Here is the way I see it :) There is no such `api_auth` in auth managers. There are API auth provided by Airflow itself (`session`, `default` and `deny_all`) and API auth provided by auth managers (e.g. `basic_auth` for FAB auth manager). There is no need to have an API which return the list of API auth. When it comes to configuring which API auth you want to use you could do something like this: `airflow.auth.managers.fab.api.auth.backend.basic_auth,airflow.api.auth.backend.session`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org