The GitHub Actions job "Tests (AMD)" on airflow.git/fix/keycloak-jwt-clear-fresh-token has failed. Run started by GitHub user stegololz (triggered by stegololz).
Head commit for run: 1b54222018d2f7455cda8c5334dca69c827c6c9b / Mathieu Monet <[email protected]> Fix login loop when the login callback carries an expired Airflow JWT KeycloakJWTMiddleware clears the JWT cookie when token validation fails. When the failing token arrives on the login callback request itself (a re-login after the previous JWT expired, with the stale cookie still in the browser jar), the clearing Set-Cookie is appended after the fresh token the callback just set. The browser applies the deletion last, the new session dies in the response that created it, and the user is sent back to login indefinitely. #71077 fixed the same clobber for requests carrying no token at all; this covers the remaining path where an expired token is present. The login callback now signals via request.state.jwt_token_issued that the response carries a freshly issued JWT, and the middleware skips the cookie clear in that case. Co-Authored-By: Claude Fable 5 <[email protected]> Report URL: https://github.com/apache/airflow/actions/runs/31612081594 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
