potiuk commented on PR #72655: URL: https://github.com/apache/airflow/pull/72655#issuecomment-5574151490
@pierrejeambrun @vincbeck — this is the plugin-app authentication question from August, now written up. The direction was agreed on the tracker on 27 Aug: document it and update the example, and *"ideally some mechanism of explicitly stating 'no user authentication needed' in plugin ... (secure-by-default)"* — which Vincent agreed to. This PR is that: authentication on by default, an explicit `"public": True` opt-out, and `plugins.rst` plus the example updated. Verified against `main`: an unauthenticated request to a mounted plugin route returns `200` with the payload, because a Starlette mount inherits none of the parent's dependencies. What I need is confirmation that the agreed direction is still what we want now that it's written, since it's a behaviour change for plugins serving anonymous endpoints today. Pierre — you were on the original thread and hadn't weighed in yet. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
