vincbeck commented on PR #34924:
URL: https://github.com/apache/airflow/pull/34924#issuecomment-1769137290

   > As far as I understand (and I might be wrong), currently the way how to 
configure backends in order to get the UI working is: 
airflow.api.auth.backend.basic_auth,airflow.api.auth.backend.session. This will 
allow the API user to use basic authentication, but also the React UI to 
communicate with the webserver via the same API (session). Does it mean that 
api_auth method of AuthManager will return array of auths as well? Or do we 
expect AuthManagers to return api_auth that will already handle session 
authentication ? Or maybe we will always append the "session" auth backend when 
we check for API - regardless from Auth Manager ? I could have missed that so 
sorry, If I am asking naive questions here :).
   
   Here is the way I see it :) There is no such `api_auth` in auth managers. 
There are API auth provided by Airflow itself (`session`, `default` and 
`deny_all`) and API auth provided by auth managers (e.g. `basic_auth` for FAB 
auth manager). There is no need to have an API which return the list of API 
auth. When it comes to configuring which API auth you want to use you could do 
something like this: 
`airflow.auth.managers.fab.api.auth.backend.basic_auth,airflow.api.auth.backend.session`.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to