potiuk commented on code in PR #72207:
URL: https://github.com/apache/airflow/pull/72207#discussion_r3883707579


##########
providers/keycloak/docs/changelog.rst:
##########
@@ -25,6 +25,14 @@
 Changelog
 ---------
 
+.. note::

Review Comment:
   Agreed — dropped it.
   
   Every place a session is established sets `user_id` from the Keycloak 
subject — `routes/login.py`, and both the password and client-credentials 
grants in `services/token.py` — so the two can only disagree in a request whose 
cookies were assembled by hand. Nothing a deployment does by ordinary use 
reaches the new refusal, which left the note describing a change nobody 
observes.
   
   ---
   Drafted-by: Claude Code (Opus 5); reviewed by @potiuk before posting



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to