potiuk commented on code in PR #46384:
URL: https://github.com/apache/airflow/pull/46384#discussion_r1939751887
##########
providers/fab/src/airflow/providers/fab/auth_manager/security_manager/override.py:
##########
@@ -839,12 +839,24 @@ def _init_config(self):
app.config.setdefault("AUTH_ROLES_MAPPING", {})
app.config.setdefault("AUTH_ROLES_SYNC_AT_LOGIN", False)
app.config.setdefault("AUTH_API_LOGIN_ALLOW_MULTIPLE_PROVIDERS", False)
- app.config.setdefault(
- "AUTH_DB_FAKE_PASSWORD_HASH_CHECK",
-
"scrypt:32768:8:1$wiDa0ruWlIPhp9LM$6e409d093e62ad54df2af895d0e125b05ff6cf6414"
- "8350189ffc4bcc71286edf1b8ad94a442c00f890224bf2b32153d0750c89ee9"
- "401e62f9dcee5399065e4e5",
- )
+
+ from packaging.version import Version
+ from werkzeug import __version__ as werkzeug_version
+
+ parsed_werkzeug_version = Version(werkzeug_version)
+ if parsed_werkzeug_version < Version("3.0.0"):
Review Comment:
No - it should be 3.0.0 because that's where scrypt became the default
algorithm changed in 3.0.0 (and what this one is about is to use the default
algorithm for password in case user is missing).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
