vincbeck commented on code in PR #39055:
URL: https://github.com/apache/airflow/pull/39055#discussion_r1567544565
##########
airflow/www/app.py:
##########
@@ -70,7 +72,20 @@
def create_app(config=None, testing=False):
"""Create a new instance of Airflow WWW app."""
- flask_app = Flask(__name__)
+ connexion_app = connexion.FlaskApp(__name__)
+
+ @connexion_app.app.before_request
Review Comment:
Correct. The path is `/auth/fab/v1`. Ideally we should have a set containing
all the paths that need to ignore CSRF. SO far I can see only 2: Airflow API
and Fab API
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]