shahar1 commented on PR #61585: URL: https://github.com/apache/airflow/pull/61585#issuecomment-3864578905
> Add AUTH_OAUTH_ROLE_KEYS configuration to allow Azure AD OAuth to use 'groups' claim instead of hardcoded 'roles' claim. > > This enables organizations using Azure AD groups for access control to map group memberships to Airflow roles without requiring custom app role definitions. > > Changes: > > * Add AUTH_OAUTH_ROLE_KEYS config support in get_oauth_user_info > * Default to 'roles' for backward compatibility > * Add test case for Azure OAuth with groups configuration > * Add documentation for Azure AD group-based authorization > > closes: #61567 > > ##### Was generative AI tooling used to co-author this PR? > * [ ] Yes (please specify the tool below) > > * Read the **[Pull Request Guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#pull-request-guidelines)** for more information. Note: commit author/co-author name and email in commits become permanently public when merged. > * For fundamental code changes, an Airflow Improvement Proposal ([AIP](https://cwiki.apache.org/confluence/display/AIRFLOW/Airflow+Improvement+Proposals)) is needed. > * When adding dependency, check compliance with the [ASF 3rd Party License Policy](https://www.apache.org/legal/resolved.html#category-x). > * For significant user-facing changes create newsfragment: `{pr_number}.significant.rst` or `{issue_number}.significant.rst`, in [airflow-core/newsfragments](https://github.com/apache/airflow/tree/main/airflow-core/newsfragments). For your next PRs that refer to a specific issue - please also comment on the issue that you ask to be assigned for, and check please if others asked for that just before you - so there won't be a situation where two people work on the same issue in parallel. Thank you! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
