This is an automated email from the ASF dual-hosted git repository.
vincbeck pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new a270429c889 Fix SSO docs pointing at the pre-Airflow 3 OAuth redirect
path (#71624)
a270429c889 is described below
commit a270429c889dbf9e18a300cc3366e163de791581
Author: Parman Mohammadalizadeh <[email protected]>
AuthorDate: Fri Aug 14 20:54:23 2026 +0330
Fix SSO docs pointing at the pre-Airflow 3 OAuth redirect path (#71624)
The FAB auth manager is mounted under /auth in Airflow 3, and its callback
route is per-provider, so a redirect URI registered from the troubleshooting
section is one the OAuth provider never calls back -- producing exactly the
redirect URI mismatch that section is meant to resolve. The sibling
webserver-authentication and api-authentication docs already show the
correct
path.
---
providers/fab/docs/auth-manager/sso.rst | 8 +++++---
1 file changed, 5 insertions(+), 3 deletions(-)
diff --git a/providers/fab/docs/auth-manager/sso.rst
b/providers/fab/docs/auth-manager/sso.rst
index 837ffd1fd78..f83df2559b0 100644
--- a/providers/fab/docs/auth-manager/sso.rst
+++ b/providers/fab/docs/auth-manager/sso.rst
@@ -297,12 +297,14 @@ Troubleshooting
- Check Airflow and webserver logs for detailed error messages
- Ensure all environment variables are set and exported correctly
- - Verify callback URLs in your SSO provider match your Airflow webserver URL
(typically ``http://your-airflow-domain/oauth-authorized``)
+ - Verify callback URLs in your SSO provider match your Airflow webserver URL
(typically ``http://your-airflow-domain/auth/oauth-authorized/<provider>``)
- **Redirect URI mismatch**:
- - In your OAuth provider, set the redirect URI to:
``http://your-airflow-domain/oauth-authorized``
- - For development, this might be: ``http://localhost:8080/oauth-authorized``
+ - In your OAuth provider, set the redirect URI to:
``http://your-airflow-domain/auth/oauth-authorized/<provider>``,
+ where ``<provider>`` is the ``name`` you gave it in ``OAUTH_PROVIDERS``
+ - For development, this might be:
``http://localhost:8080/auth/oauth-authorized/google``
+ - On Airflow 2 the path had no ``/auth`` prefix:
``http://your-airflow-domain/oauth-authorized/<provider>``
- **Scope-related errors**:
