Great work Vincent. Pavan
On Fri, Mar 21, 2025, 06:46 Shahar Epstein <sha...@apache.org> wrote: > Great job Vincent! > > On Thu, Mar 20, 2025 at 3:18 PM Beck, Vincent <vincb...@amazon.com.invalid > > > wrote: > > > Hi everyone, > > > > I just merged https://github.com/apache/airflow/pull/47691 which sets > > SimpleAuthManager as the default auth manager in Airflow. If you pull the > > latest main branch, Airflow will no longer use the FAB auth Manager by > > default but instead use SimpleAuthManager. This is another step towards > > removing Flask from Airflow. > > > > *What changed?* > > > > Auth managers define authentication (AuthN) and authorization (AuthZ) > > logic in Airflow. Switching to SimpleAuthManager means changes in how > > authentication and authorization work: > > - The FAB login form is no longer used; authentication now follows the > > method provided by SimpleAuthManager. > > - Pages previously used to manage users and roles (/auth/users/list, > > /auth/roles/list, etc.) are no longer available since they are part of > the > > FAB Auth Manager. > > - SimpleAuthManager manages users and roles through a configuration file > > instead of a web interface. > > > > For more details on SimpleAuthManager, please refer to the documentation: > > > https://github.com/apache/airflow/blob/main/docs/apache-airflow/core-concepts/auth-manager/simple.rst > > . > > However, SimpleAuthManager is a minimal auth manager designed for > > development environments and *should not be used in production*. > > > > *Using a different auth manager* > > > > This change only updates the default auth manager, no existing options > > have been removed. You can continue using your preferred auth manager, > > including FAB, by setting the following in the config `[core] > auth_manager > > = <auth_manager_path>`. For example, to continue using FAB:: `[core] > > auth_manager = > > airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager`. > > > > *Breeze users* > > > > If you are using Breeze, switching between auth managers is now easier. > PR > > #47691 introduces a new `--auth-manager` parameter for `breeze > > start-airflow`: > > - Start Airflow with SimpleAuthManager:: `breeze start-airflow > > --auth-manager SimpleAuthManager` (or simply `breeze start-airflow`, > since > > SimpleAuthManager is now the default) > > - Start Airflow with FAB auth manager:: `breeze start-airflow > > --auth-manager FabAuthManager` > > > > Simple auth manager auto generates a random password for all users > defined > > in the config. These passwords are stored by default in > > ``AIRFLOW_HOME/simple_auth_manager_passwords.json.generated``. For > > convenience, Breeze predefines two default users: > > - "admin" (password: "admin") -> full access > > - "viewer" (password: "viewer") -> read-only access > > > > If you encounter any issues or have concerns about this change, feel free > > to discuss on Slack or submit a PR to address them. > > > > Thanks, > > Vincent > > >
