This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new 5ead3bbc575 remove gropus claim from access tokens in the Keycloak 
client created by KeycloakAuthManager cli (#71093)
5ead3bbc575 is described below

commit 5ead3bbc575d69ad3fcd23ab072101d24a6c82d4
Author: stephen-bracken <[email protected]>
AuthorDate: Thu Aug 6 03:41:01 2026 +0100

    remove gropus claim from access tokens in the Keycloak client created by 
KeycloakAuthManager cli (#71093)
    
    Co-authored-by: Stephen Bracken <email-protected>
---
 .../src/airflow/providers/keycloak/auth_manager/cli/commands.py         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
 
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
index 705fc4eb0bf..6ead332155b 100644
--- 
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
+++ 
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
@@ -222,7 +222,7 @@ def _create_group_membership_mapper(
         "config": {
             "full.path": "false",
             "id.token.claim": "false",
-            "access.token.claim": "true",
+            "access.token.claim": "false",
             "userinfo.token.claim": "false",
             "claim.name": "groups",
             "jsonType.label": "String",

Reply via email to