github-actions[bot] opened a new pull request, #76318: URL: https://github.com/apache/airflow/pull/76318
`auth login` and `auth token` log in with a username and password. Before they run, the decorator builds the API client with the token stored for the current environment. The commands then switch the client to the URL from `--api-url`, but the client still adds the stored token to every request. If the URL is wrong, or points to another server, that server receives the stored token. The `/auth/token/cli` endpoints of the simple, FAB and Keycloak auth managers only read the username and password, so the token is never needed there. (cherry picked from commit 7a7935754ed60e4bfaf37228c4d479ac77a2f5cd) Co-authored-by: Andrew Chang <[email protected]> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
