timothyclarke commented on issue #15601:
URL: https://github.com/apache/airflow/issues/15601#issuecomment-902549482


   If the scope contains `openid`, The custom security manager should and 
oauth_user_info should not be required. 
   ```
   SECURITY_MANAGER_CLASS = GoogleAirflowSecurityManager
   class GoogleAirflowSecurityManager(AirflowSecurityManager):
       def oauth_user_info(self, provider, resp):
   ```
   The log shows `DEBUG - OAUTH Authorized resp:` ... `'id_token': 
'<redacted>'`  The id token should contain all the user info. Looking at 
[authlib flask 
docs](https://docs.authlib.org/en/latest/client/flask.html#flask-openid-connect-client)
 you can [decode the contents of the `id_token`](https://jwt.io) on many web 
sites
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to