potiuk commented on issue #23: URL: https://github.com/apache/tooling-agents/issues/23#issuecomment-4393754820
Update on F-007 — I went ahead and tackled it as a defense-in-depth PR rather than leaving it as a follow-up: [apache/airflow#66505](https://github.com/apache/airflow/pull/66505). It applies `dependencies=[Depends(get_user)]` at the `authenticated_router` and `ui_router` level so every authenticated route default-denies, with a structural test asserting the dependency stays in place. No coverage gap exists today (every authenticated route already declares its own auth dependency), so the change is purely additive — the value is preventing a future route from being added under either router without an auth check. --- This response was generated by AI and may contain mistakes. After you've had a chance to look at the PR and respond, a real Airflow maintainer (human) will follow up. --- Drafted-by: Claude Opus 4.7 (1M context); reviewed by @potiuk before posting -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
