The GitHub Actions job "Tests (AMD)" on 
airflow.git/fix-oauth-https-redirect-70023 has failed.
Run started by GitHub user anmolxlight (triggered by anmolxlight).

Head commit for run:
331c3127427b30a71263d2e613e273ec1e06518b / Anmol Mishra <[email protected]>
Fix OAuth redirect URI scheme behind reverse proxy (#70023)

Override login in CustomAuthOAuthView to honour X-Forwarded-Proto
header so that the redirect URI built by url_for(..., _external=True)
uses the correct external scheme (https://) when Airflow runs behind
a TLS-terminating reverse proxy.

Even when [fab] enable_proxy_fix = True is configured, some proxy
setups may not properly update wsgi.url_scheme, causing EntraID /
Azure AD SSO to reject the redirect URI as http:// instead of https://.
This fix checks X-Forwarded-Proto directly as a defense-in-depth measure.

Signed-off-by: Anmol Mishra <[email protected]>

Report URL: https://github.com/apache/airflow/actions/runs/29595035845

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to