The GitHub Actions job "Tests" on airflow.git has failed.
Run started by GitHub user ashb (triggered by ashb).

Head commit for run:
5505d214a50f9710a12dd7c97a18472de938c394 / Ash Berlin-Taylor <[email protected]>
Validate JWT tokens in the ExecutionAPI for strong task identity

This adds in Bearer auth token validation for the entire Execution API server.

Some notes about how this is achieved:

* We make heavy use of FastAPI's Dependency Injection to make this work

* We use the `svcs`[1] module to make managing the service, and viewing the
  state of it, easy

* In `.execution_api.routes` there are now two routers used -- one which
  ensures that _everything_ underneath it has a valid ExecutionAPI JWT, and
  another one which is "public" (and should contain very few routes)

* We ran into an issue (linked in code) with `__future__ annotations` imports,
  and had to disable it on one specific file.

* Refreshing of expiring Task Identity tokens is not handled yet (this will
  need middleware to support, a Dependency cannot add the response headers)

[1]: pypi.org/project/svcs

Report URL: https://github.com/apache/airflow/actions/runs/13912220414

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to