This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 5ead3bbc575 remove gropus claim from access tokens in the Keycloak
client created by KeycloakAuthManager cli (#71093)
5ead3bbc575 is described below
commit 5ead3bbc575d69ad3fcd23ab072101d24a6c82d4
Author: stephen-bracken <[email protected]>
AuthorDate: Thu Aug 6 03:41:01 2026 +0100
remove gropus claim from access tokens in the Keycloak client created by
KeycloakAuthManager cli (#71093)
Co-authored-by: Stephen Bracken <email-protected>
---
.../src/airflow/providers/keycloak/auth_manager/cli/commands.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
index 705fc4eb0bf..6ead332155b 100644
---
a/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
+++
b/providers/keycloak/src/airflow/providers/keycloak/auth_manager/cli/commands.py
@@ -222,7 +222,7 @@ def _create_group_membership_mapper(
"config": {
"full.path": "false",
"id.token.claim": "false",
- "access.token.claim": "true",
+ "access.token.claim": "false",
"userinfo.token.claim": "false",
"claim.name": "groups",
"jsonType.label": "String",