hanjungwoo3 opened a new issue, #57400:
URL: https://github.com/apache/airflow/issues/57400
### Apache Airflow version
3.1.1
### If "Other Airflow 2/3 version" selected, which one?
_No response_
### What happened?
**Description**
When editing a user in Airflow (/auth/user/edit/<user_id>), clicking the
“Back” button (<-) at the bottom of the page causes a Mixed Content error.
If the user clicks the Back button again, the left sidebar menu is
duplicated — one instance appears inside the frame of the main page, resulting
in two overlapping side menus.
**Steps to Reproduce**
1. Navigate to Security → Users in the Airflow web UI.
2. Click on any user to edit (e.g., airflow admin user).
3. On the Edit User page, click the Back (<-) button once.
• Observe the Mixed Content error in the browser console.
4. Click the Back button again.
• The left menu is rendered inside the main content frame,
creating two side menus.
**Expected Behavior**
• Clicking Back should safely return to the user list
(/auth/users/list/) without any console errors.
• The left sidebar menu should remain single and correctly
positioned.
**Actual Behavior**
• A Mixed Content warning/error appears in the console:
`Mixed Content: The page at 'https://airflow-test.com/security/users' was
loaded over HTTPS, but requested an insecure resource
'http://airflow-test.com/auth/users/list/'. This request has been blocked.`
• A second click on Back results in the left menu being
duplicated inside the content frame.
• Deployment Type: Running on Podman container
• Webserver Protocol: HTTPS
• Browser: Chrome (latest version)
### What you think should happen instead?
The issue seems to occur because the Back button is pointing to a non-HTTPS
endpoint (http://) instead of the secure (https://) one, causing the browser to
block the request.
After that, the Airflow app attempts to reload content into an existing
iframe, leading to duplicated menus.
### How to reproduce
1. Run Airflow in a Podman container with HTTPS enabled.
2. Log in to the Airflow web UI.
3. Go to Security → Users.
4. Click any user to open the Edit User page.
• Example URL: https://airflow-test.com/security/users
5. Click the Back (<-) button at the bottom of the page once.
• A Mixed Content error appears in the browser
### Operating System
podman
### Versions of Apache Airflow Providers
3.1.1
### Deployment
Docker-Compose
### Deployment details
_No response_
### Anything else?
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
