parkhojeong commented on issue #57400: URL: https://github.com/apache/airflow/issues/57400#issuecomment-4466760197
The `Mixed Content` error is caused by FAB not being proxy-aware in an HTTPS reverse proxy setup, which makes `/auth/back` generate an `http://` redirect inside the Security iframe. You can handle The `Mixed Content` error with an `enable_proxy_fix` option. https://github.com/apache/airflow/pull/49942 ### repro Start Airflow behind HTTPS, for example with Caddy on macOS. ```sh caddy reverse-proxy \ --from https://localhost:28443 \ --to http://localhost:28080 ``` <details> <summary> error repro </summary> run airflow without enable_proxy_fix ```sh env SKIP_BREEZE_SELF_UPGRADE_CHECK=true \ BREEZE_INIT_COMMAND='export AIRFLOW__FAB__ENABLE_PROXY_FIX=False' \ breeze start-airflow \ --auth-manager FabAuthManager \ --backend sqlite \ --db-reset \ --skip-assets-compilation \ --use-airflow-version 3.2.1 \ --airflow-extras fab \ --airflow-constraints-reference constraints-3.2.1 \ --providers-constraints-reference constraints-3.2.1 \ --mount-sources remove ``` 1. Login admin/admin 2. Secret(nav) - Users 3. Click edit button 4. Click back button https://github.com/user-attachments/assets/cc8ccfc9-1254-4ddd-b86b-0dd734d06417 </details> <details> <summary> fix repro </summary> run airflow with enable_proxy_fix ```sh env SKIP_BREEZE_SELF_UPGRADE_CHECK=true \ BREEZE_INIT_COMMAND='export AIRFLOW__FAB__ENABLE_PROXY_FIX=True' \ breeze start-airflow \ --auth-manager FabAuthManager \ --backend sqlite \ --db-reset \ --skip-assets-compilation \ --use-airflow-version 3.2.1 \ --airflow-extras fab \ --airflow-constraints-reference constraints-3.2.1 \ --providers-constraints-reference constraints-3.2.1 \ --mount-sources remove ``` 1. Login admin/admin 2. Secret(nav) - Users 3. Click edit button 4. Click back button https://github.com/user-attachments/assets/5c3861c1-1232-4c0d-b051-568c83b34875 </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
