The GitHub Actions job "Tests (AMD)" on 
airflow.git/keycloak-fab-logout-revoke-token has failed.
Run started by GitHub user securylight (triggered by potiuk).

Head commit for run:
1130a23eb682adab19795e9bcc2f779290a8cf12 / securefromscratch 
<[email protected]>
Revoke JWT token on provider-level /auth/logout routes

The core /auth/logout route (core_api/routes/public/auth.py) revokes
the current JWT before redirecting to the auth manager's logout URL
(see #67289). FabAuthManager's and KeycloakAuthManager's own
provider-level /auth/logout routes redirect straight to the IdP
without the same revocation call, so a token is still valid if that
route is reached directly instead of through the core route.

This adds the same revoke_token() call to both provider routes for
consistency, so a JWT is revoked regardless of which /auth/logout
path handles the request.

Report URL: https://github.com/apache/airflow/actions/runs/30354371804

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to