shahar1 opened a new issue, #38797:
URL: https://github.com/apache/airflow/issues/38797

   ### Official Helm Chart version
   
   main (development)
   
   ### Apache Airflow version
   
   dev
   
   ### Kubernetes Version
   
   N/A
   
   ### Helm Chart configuration
   
   _No response_
   
   ### Docker Image customizations
   
   _No response_
   
   ### What happened
   
   In recent months, Google made some changes to Chrome, causing "sticky" data 
breach warnings when logging in to Airflow's UI using the default credentials 
(username: `admin`, password: `admin`) — see attached.
   <img width="801" alt="admin_admin" 
src="https://github.com/apache/airflow/assets/60007259/4d7bde53-cacb-4e24-8d9e-9f4b30927f8b";>
   By "sticky", I mean that when navigating to any page afterwards - this 
warning still pops up.
   The only way to get rid of it without changing the credentials is to log in 
from another tab or use another browser.
   
   Unfortunately, I didn't manage to find a way to cancel it via Chrome's 
settings.
   
   ### What you think should happen instead
   
   I thought that it would be appropriate to bring it to the attention of the 
community as this warning is quite annoying for Chrome users (especially for 
contribution purposes), so as long as there is no good option to disable this 
warning from Chrome's settings -  I assume that the options are any of the 
following:
   1. Change the default credentials into a less trivial combination to avoid 
these warnings for Chrome users (e.g., `admin:airflow,` `airflow:airflow,` 
etc.).
   2. Keep the current behavior and add some documentation about that.
   3. As there could be some heavy consequences due to the first option, it 
might be better to make the default credentials customizable when running with 
`breeze` configuration.
   
   ### How to reproduce
   
   Easiest with `breeze`:
   1. Use the latest Chrome Version (as of writing these lines: 123.0.6312.106).
   2. Run `breeze --start-airflow`
   3. Log in to Airflow's UI with the default credentials (`admin`, `admin`).
   4. Wait for the warning to pop up.
   
   ### Anything else
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of 
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to