baptistegh commented on PR #75938: URL: https://github.com/apache/airflow/pull/75938#issuecomment-6521964428
Pushed a follow-up commit with the review fixes. While in there I also fixed a few things that weren't raised in review: - Endpoints from the login metadata must now be on the API server's origin. Before, an absolute URL would have received the code, the PKCE verifier and any stored token. - The code exchange is no longer retried, because codes are single use and a replay can be treated as an attack. - Error text from the server is escaped, so it can't crash the `rich` output. - `auth token --sso` now refuses `--username` and `--password`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
