Enucatl commented on issue #49495: URL: https://github.com/apache/airflow/issues/49495#issuecomment-3210871973
also see above: this isn't possible for most SSO solutions, especially in enterprise environments. in fact it would be a large security risk. ------------- Matteo Inviato da Proton Mail Android -------- Messaggio originale -------- 21/08/25 16:30, Pierre Jeambrun ha scritto: > pierrejeambrun left a comment [(apache/airflow#49495)](https://github.com/apache/airflow/issues/49495#issuecomment-3210855650) > >> It is clearly an incompatibility of airflow 3 with http-only single sign on cookies. > > ***@***.***(https://github.com/AbdulKhadar169) Yes it could be that too if you are overriding cookies to set them httpOnly. Airflow UI needs to be able to access cookies as it is designed for now and won't work with that. > > To make airflow UI compatible with httpOnly cookies we will have to rework how we pass the token from the auth managers to the main app and update how the front-end retrieve and pass down the token to the backend. > > Until then I think the best approaches is to whitelist specifically airflow cookies and not override them with httpOnly. (and keep the rule enhancement for all of your other applications) > > — > Reply to this email directly, [view it on GitHub](https://github.com/apache/airflow/issues/49495#issuecomment-3210855650), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AAK3SVJHJ4A6RNZFG6T3AKT3OXJZ7AVCNFSM6AAAAAB3Q3SYTCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTEMJQHA2TKNRVGA). > You are receiving this because you commented.Message ID: ***@***.***> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
