potiuk commented on issue #22397:
URL: https://github.com/apache/airflow/issues/22397#issuecomment-1159225904
> @potiuk I can help by testing it. I have some scenarios that integrate
Airflow with Azure AD for authentication and implement custom roles as well.
Cool :) Thansl!
Status for everyone:
* I already have a separate PR #24519 that is important prerequisite for
the migration (basically changing the library that is used for
encryption/verification of log retrieval to more standard one as one of the
upgraded dependencies deprecated and removed the class we were used). The good
news is that I did it in a much more "standard" way (following JWT standard and
pyjwt library using)
* there is another PR #24516 that should fix incompatibility of authlib
library wiht Flask App Builder (I had to refresh docker images as well to fix
it for our past Airflow releases #24524
* the #24399 is draft PR that I keep on rebasing that I am using to see
what's left and extract PRs like above after fixing them there. I already did
the following:
* merged in all the FAB 4.1.1 security manager changes that we need to
synchronize every time
* I got rid of most of the static MyPy erors (Flask 2 added static check
typing that revealed some potential typing issues and MyPy flagged them
What is left:
* currently new version of Werkzeug fails with `ImportError: cannot import
name 'safe_str_cmp' from 'werkzeug.security'
(/usr/local/lib/python3.7/site-packages/werkzeug/security.py)` which I am
looking at removing next
* tests are failing (but for now due to Werkzeug, so we do not know yet the
real scope)
* provider verification is failing due to conflicts in dependencies - I will
look to it at the very end
* docker-compose quick-start tests are failing - those are likely due to
some flask failures
* helm chart tests are failing (same - lilkely flask upgrade problem)
It will take a few days/ week to iterate on all those and slowly fix it
one-by-one (but PRs to my PR #24399 are most welcome if anyone would like to
take a stab on solving any of the issues there :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
