codeant-ai-for-open-source[bot] commented on PR #37973:
URL: https://github.com/apache/superset/pull/37973#issuecomment-4030141747
## **Sequence Diagram**
This PR adds UI and backend support for users to create and manage API keys,
and wires Superset (including MCP tools) to authenticate requests by delegating
API key validation to the Flask AppBuilder SecurityManager.
```mermaid
sequenceDiagram
participant User
participant Frontend
participant SupersetBackend
participant FABSecurityManager
participant MCPTool
User->>Frontend: Open user info and choose create API key
Frontend->>SupersetBackend: Request new API key
SupersetBackend->>FABSecurityManager: Create and store API key for user
FABSecurityManager-->>Frontend: Return one time API key via backend
Frontend-->>User: Display API key for secure copy
MCPTool->>SupersetBackend: Call MCP endpoint with bearer API key
SupersetBackend->>FABSecurityManager: Validate API key and load user
FABSecurityManager-->>SupersetBackend: Return authenticated user
SupersetBackend-->>MCPTool: Execute MCP action with user permissions
```
---
*Generated by [CodeAnt AI](https://codeant.ai)*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
