The GitHub Actions job "Tests (AMD)" on airflow.git/fix/jwt-token-refresh-67939 
has failed.
Run started by GitHub user GayathriSrividya (triggered by GayathriSrividya).

Head commit for run:
7666b4ba3deaeed7775b90ca2abb919f8eca979d / Gayathri Srividya Rajavarapu 
<[email protected]>
Fix JWT token refresh for tasks that run past token expiry

When a task's JWT token expires while a request is being processed, the
JWTReissueMiddleware was unable to refresh it: the strict avalidated_claims
call raised ExpiredSignatureError, so no Refreshed-API-Token header was
added to the response.

The supervisor retries heartbeats on non-fatal errors; without a refreshed
token in the response the client never updates its Bearer token, leading to
consecutive 403 failures that eventually kill the task.

Fix: when avalidated_claims raises ExpiredSignatureError in the reissue
path, retry with a 60-second grace leeway so tokens that expired during
request processing can still receive a replacement. The signature and all
other claims are still fully verified; only the expiry window is relaxed in
this specific code path.

closes: #67939

Report URL: https://github.com/apache/airflow/actions/runs/26872723159

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to