The GitHub Actions job "Tests (AMD)" on airflow.git/backport-69471 has failed. Run started by GitHub user pierrejeambrun (triggered by pierrejeambrun).
Head commit for run: 79f8ee98c95251e75d95ffa5e9e2bfeb54aa9147 / Pierre Jeambrun <[email protected]> Authorize Dag reparse against the file's Dags, not the query-string dag_id (#69471) * Authorize Dag reparse against the file's Dags, not the query-string dag_id The PUT /parseDagFile/{file_token} endpoint authorized the caller through a route dependency that, with no dag_id path parameter, resolves the target from the query string, which is decoupled from the Dag file the signed file_token actually resolves to. Add a requires_access_dag_from_file_token dependency that decodes the token, resolves the Dags defined in that file, and authorizes the caller against exactly those Dags, so authorization always matches the Dag being reparsed regardless of any request parameter. * Update airflow-core/src/airflow/api_fastapi/core_api/security.py Co-authored-by: Amogh Desai <[email protected]> * Fix CI --------- Co-authored-by: Amogh Desai <[email protected]> (cherry picked from commit c5faeb1555b4076739665b9434f616db37559727) Report URL: https://github.com/apache/airflow/actions/runs/29726038813 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
