Hey Keith, this should be possible. We run on Kubernetes and use nginx-ingress for authentication to the Airflow webserver. We configure our Airflow webserver ingress objects to forward auth requests to our separate auth server using these annotations - https://github.com/astronomer/helm.astronomer.io/blob/master/charts/airflow/templates/ingress.yaml#L20-L24. If the auth server authorizes the request, we add a JWT to the headers and pass that back to Airflow where we have a custom FAB security manager plugin for Airflow. The security manager takes the JWT and translates that into an actual Airflow user with an appropriate RBAC role.
Even if you aren't on Kube, you should be able to configure a standard NGINX server to do the same. On Tue, Sep 10, 2019 at 6:29 PM Keith Brown <[email protected]> wrote: > Is it possible to authenticate by proxy? I am using Nginx and able to > Auth Proxy to other services like Grafana -- > https://grafana.com/docs/auth/auth-proxy/ > > I would like to do the same with Airflow. > > Is it possible? > -- *Greg Neiheisel* / CTO Astronomer.io
