pierrejeambrun commented on issue #49495: URL: https://github.com/apache/airflow/issues/49495#issuecomment-3210855650
> It is clearly an incompatibility of airflow 3 with http-only single sign on cookies. @AbdulKhadar169 Yes it could be that too if you are overriding cookies to set them `httpOnly`. Airflow UI needs to be able to access cookies as it is designed for now and won't work with that. To make airflow UI compatible with httpOnly cookies we will have to rework how we pass the token from the auth managers to the main app and update how the front-end retrieve and pass down the token to the backend. Until then I think the best approaches is to whitelist specifically airflow cookies and not override them with `httpOnly`. (and keep the rule enhancement for all of your other applications) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
