kempspo opened a new issue, #52226:
URL: https://github.com/apache/airflow/issues/52226
### Apache Airflow version
3.0.2
### If "Other Airflow 2 version" selected, which one?
_No response_
### What happened?
```
INFO: 10.112.4.155:32994 - "GET / HTTP/1.1" 200 OK
[2025-06-25T07:25:00.957+0000] {base_auth_manager.py:105} ERROR - JWT token
is not valid: The specified alg value is not allowed
INFO: 10.112.4.155:32994 - "GET /ui/config HTTP/1.1" 403 Forbidden
INFO: 10.112.4.155:32994 - "GET
/api/v2/auth/login?next=https%3A%2F%2Fexample.com%2F HTTP/1.1" 307 Temporary
Redirect
[2025-06-25T07:25:01.461+0000] {views.py:705} DEBUG - Provider: None
[2025-06-25T07:25:01.461+0000] {views.py:705} DEBUG - Provider: None
INFO: 10.112.4.155:32994 - "GET /auth/login/?next=https://example.com/
HTTP/1.1" 200 OK
[2025-06-25T07:25:01.712+0000] {base_auth_manager.py:105} ERROR - JWT token
is not valid: The specified alg value is not allowed
```
Using default values for fab and auth manager on the helm chart other than
```
config:
fab:
session_lifetime_minutes: 60
```
Also overriding, webserver_config.py via
```
apiServer:
apiServerConfig: |
from flask_appbuilder.security.manager import AUTH_OAUTH
AUTH_TYPE = AUTH_OAUTH
CSRF_ENABLED = True
# registration configs
AUTH_USER_REGISTRATION = True # allow users who are not already in
the FAB DB
AUTH_USER_REGISTRATION_ROLE = "Public" # this role will be given in
addition to any AUTH_ROLES_MAPPING
AUTH_ROLES_SYNC_AT_LOGIN = False
# the list of providers which the user can choose from
OAUTH_PROVIDERS = [
{
'name': 'google',
'icon': 'fa-google',
'token_key': 'access_token',
'remote_app': {
'client_id': '***.apps.googleusercontent.com',
'client_secret': '***',
'api_base_url': 'https://www.googleapis.com/oauth2/v2/',
'client_kwargs': {'scope': 'openid email profile'},
'request_token_url': None,
'access_token_url':
'https://accounts.google.com/o/oauth2/token',
'authorize_url':
'https://accounts.google.com/o/oauth2/auth'
},
'whitelist': ['@***]
}
]
```
### What you think should happen instead?
_No response_
### How to reproduce
1. Try to login to Airflow UI
### Operating System
Debian GNU/Linux 12 (bookworm)
### Versions of Apache Airflow Providers
apache-airflow-providers-airbyte | 5.2.0
apache-airflow-providers-amazon | 9.8.0
apache-airflow-providers-celery | 3.11.0
apache-airflow-providers-cncf-kubernetes | 10.6.0
apache-airflow-providers-common-compat | 1.7.1
apache-airflow-providers-common-io | 1.6.0
apache-airflow-providers-common-messaging | 1.0.3
apache-airflow-providers-common-sql | 1.27.2
apache-airflow-providers-docker | 4.4.0
apache-airflow-providers-elasticsearch | 6.3.0
apache-airflow-providers-fab | 2.2.1
apache-airflow-providers-ftp | 3.13.0
apache-airflow-providers-git | 0.0.2
apache-airflow-providers-google | 16.0.0
apache-airflow-providers-grpc | 3.8.0
apache-airflow-providers-hashicorp | 4.2.0
apache-airflow-providers-http | 5.3.1
apache-airflow-providers-microsoft-azure | 12.4.0
apache-airflow-providers-mysql | 6.3.0
apache-airflow-providers-odbc | 4.10.0
apache-airflow-providers-openlineage | 2.3.0
apache-airflow-providers-postgres | 6.2.0
apache-airflow-providers-redis | 4.1.0
apache-airflow-providers-sendgrid | 4.1.0
apache-airflow-providers-sftp | 5.3.0
apache-airflow-providers-slack | 9.1.1
apache-airflow-providers-smtp | 2.1.0
apache-airflow-providers-snowflake | 6.3.1
apache-airflow-providers-ssh | 4.1.0
apache-airflow-providers-standard | 1.3.0
apache-airflow-providers-trino | 6.3.0
### Deployment
Official Apache Airflow Helm Chart
### Deployment details
Helm Chart: 1.17.0
### Anything else?
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
