pierrejeambrun opened a new pull request, #73562:
URL: https://github.com/apache/airflow/pull/73562

   The `revoked_token.jti` column stores the JWT `jti` (token identifier) 
recorded when a token is revoked. It was sized `String(32)` to fit Airflow's 
own `uuid4().hex` identifiers.
   
   External identity providers accepted through `[api_auth] trusted_jwks_url` 
mint longer `jti` claims — RFC 4122 UUIDs are 36 characters, and other issuers 
use longer opaque identifiers. These overflow the 32-character column and raise 
a `DataError` on databases that enforce length (PostgreSQL, MySQL), so those 
tokens could not be recorded in the table.
   
   This widens the column to `String(255)`, which fits any realistic identifier 
while staying within the MySQL primary-key index limit, and adds the 
corresponding migration.
   
   ---
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes — Claude Code (Opus 4.8)
   
   Generated-by: Claude Code (Opus 4.8) following [the 
guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to