auyua9 opened a new pull request, #73110:
URL: https://github.com/apache/airflow/pull/73110
## What's changed
The FastAPI users service PATCH path now hashes new passwords through
`security_manager._hash_password` instead of calling werkzeug's
`generate_password_hash` directly. The existing service test asserts the new
contract.
## Why
#65735 made the security manager honor `FAB_PASSWORD_HASH_METHOD` via
`_hash_password`, but the FastAPI PATCH `/users/{username}` path was missed:
REST-API password updates were always hashed with the default method while
CLI/UI updates used the configured one, producing mixed hash schemes in the DB
and breaking deployments that rely on a specific method (the exact problem
class #65735 / #65728 fixed for the other paths).
## Testing
- `uv run pytest
providers/fab/tests/unit/fab/auth_manager/api_fastapi/services/test_users.py` →
24 passed
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
