jedcunningham commented on code in PR #76469:
URL: https://github.com/apache/airflow/pull/76469#discussion_r4470539146
##########
airflow-core/src/airflow/api_fastapi/execution_api/security.py:
##########
@@ -99,21 +100,47 @@
_IN_PROCESS_NON_TI_CALLER = "airflow_in_process_non_ti_caller"
_IN_PROCESS_TRIGGERER_ID = "airflow_in_process_triggerer_id"
_SKIP_AUTO_TI_ATTEMPT_LIVE = "skip_auto_ti_attempt_live"
-_ALLOW_NON_TI_WRITER = "allow_non_ti_writer"
+_LIVENESS_EXEMPTION = "liveness_exemption"
_P = ParamSpec("_P")
_R = TypeVar("_R")
+JOB_UNCHECKED_SCOPE = "job:unchecked"
+
Review Comment:
`JOB_UNCHECKED_SCOPE` comes from #74370 and nothing references it on
v3-4-test, so it can be dropped.
```suggestion
```
---
Drafted-by: Claude Code (Opus 5.5) (no human review before posting)
##########
airflow-core/src/airflow/api_fastapi/execution_api/security.py:
##########
@@ -99,21 +100,47 @@
_IN_PROCESS_NON_TI_CALLER = "airflow_in_process_non_ti_caller"
_IN_PROCESS_TRIGGERER_ID = "airflow_in_process_triggerer_id"
_SKIP_AUTO_TI_ATTEMPT_LIVE = "skip_auto_ti_attempt_live"
-_ALLOW_NON_TI_WRITER = "allow_non_ti_writer"
+_LIVENESS_EXEMPTION = "liveness_exemption"
_P = ParamSpec("_P")
_R = TypeVar("_R")
+JOB_UNCHECKED_SCOPE = "job:unchecked"
+
+# A triggerer that reaches the Execution API over HTTP authenticates watchers
+# with an execution token setting 'sub' to this value. Routes marked with
+# allow_asset_watcher exempt it from the attempt-liveness check, so such a
+# token can write and clear the state of any asset. The in-process Execution
+# API also falls back to this ID for every caller that has no task identity.
+ASSET_WATCHER_ID = UUID(int=0)
Review Comment:
Missing a blank line here, so ruff-format will fail.
```suggestion
ASSET_WATCHER_ID = UUID(int=0)
```
---
Drafted-by: Claude Code (Opus 5.5) (no human review before posting)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
