vincbeck commented on code in PR #39055:
URL: https://github.com/apache/airflow/pull/39055#discussion_r1567544565


##########
airflow/www/app.py:
##########
@@ -70,7 +72,20 @@
 
 def create_app(config=None, testing=False):
     """Create a new instance of Airflow WWW app."""
-    flask_app = Flask(__name__)
+    connexion_app = connexion.FlaskApp(__name__)
+
+    @connexion_app.app.before_request

Review Comment:
   Correct. The path is `/auth/fab/v1`. Ideally we should have a set containing 
all the paths that need to ignore CSRF. SO far I can see only 2: Airflow API 
and Fab API



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to