robertpofuk commented on PR #72262:
URL: https://github.com/apache/airflow/pull/72262#issuecomment-5620684117
Adjusted implementation to ensure that at least some assertions are required
for checking weather token is allowed to be user when oidc is enabled.
jwt_verifier concept is inspured by [core].hostname_callable so should fit
overall style
jwt_verifier is on purpose built to return dict back. This way future
requirements can be added. For exmaple core Airflow hasfunction to get_teams (i
think in executor impelemtations). So We can use this return as place to extend
and return as from jwt_verifier {authorized: true teams [x, y]}. Much cleaner
to have compatible extension if we return dict then fixed values.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
