Re: Custom authentication with RBAC

[Ravi Kotecha]

Hi Gabriel,

We have extended the auth backend for FAB to support OpenIDConnect here:
https://github.com/ministryofjustice/fab-oidc
and you can see how to configure it in our helm chart

.
What auth scheme are you using? Maybe we can upstream the most common ones?


On Wed, Aug 8, 2018 at 10:31 PM Gabriel Silk 
wrote:

> Hello Airflow devs,
>
> It seems that it is not possible to use a custom auth backend with the new
> RBAC web server, like it was with the old.
>
> In the old webserver, you could simple set "webserver.auth_backend" to a
> classname and implement any logic you like.
>
> The absence of this feature is a blocker for adapting RBAC.
>
> Is there any easy fix for this? Is it possible to extend FAB in a similar
> way?
>
> Thanks!
>

Re: Custom authentication with RBAC

[Maxime Beauchemin]

You can define your own AirflowSecurityManager based on FAB's
SecurityManager
http://flask-appbuilder.readthedocs.io/en/latest/security.html docs.

We should publish docs on how to do this.

Max

On Wed, Aug 8, 2018 at 2:31 PM Gabriel Silk 
wrote:

> Hello Airflow devs,
>
> It seems that it is not possible to use a custom auth backend with the new
> RBAC web server, like it was with the old.
>
> In the old webserver, you could simple set "webserver.auth_backend" to a
> classname and implement any logic you like.
>
> The absence of this feature is a blocker for adapting RBAC.
>
> Is there any easy fix for this? Is it possible to extend FAB in a similar
> way?
>
> Thanks!
>

Custom authentication with RBAC

[Gabriel Silk]

Hello Airflow devs,

It seems that it is not possible to use a custom auth backend with the new
RBAC web server, like it was with the old.

In the old webserver, you could simple set "webserver.auth_backend" to a
classname and implement any logic you like.

The absence of this feature is a blocker for adapting RBAC.

Is there any easy fix for this? Is it possible to extend FAB in a similar
way?

Thanks!