gopidesupavan commented on PR #47432: URL: https://github.com/apache/airflow/pull/47432#issuecomment-2718265659
> > What about other auth managers? How do they set the token? > > Did we consider setting the token in a cookie that the "main" app (_not_ the UI for the specific auth manager) then deletes once it's put in to local storage? That way the approach can be universal, rather than each auth manager needing to do something similar. > > Strongly agree on this one. Auth managers should pass somehow the JWT token and then core Airflow saves it. We should not rely on auth managers to save the JWT tokens, this would create some problems in the long run The auth manager sets the token in cookies, and the main app retrieves it using document.cookie and stores it in localStorage. Then, it sets the expiration date for the token cookie. Does this align the expectation ? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
