jonathanleek opened a new pull request, #67561: URL: https://github.com/apache/airflow/pull/67561
`airflow connections get` showed the password's encryption status under both `is_encrypted` and `is_extra_encrypted` keys, because the display mapper sourced both from `Connection.is_encrypted`. These flags are independent — the extra field (which usually holds API keys, certs, etc.) can be encrypted while the password is not, or vice versa. Operators checking the readout could be misled about whether `extra` is encrypted at rest. The fix changes `is_extra_encrypted` to source from `Connection.is_extra_encrypted` in both `ConnectionDisplayMapper.full_details` and `ConnectionDisplayMapper.masked_sensitive`. A parametrized regression test exercises both methods across the two divergent flag combinations to prevent re-introducing the bug. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 4.7) Generated-by: Claude Code (Opus 4.7) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
