dosubot[bot] commented on issue #40115: URL: https://github.com/apache/superset/issues/40115#issuecomment-4448898679
<!-- Answer --> The API key authentication feature was added to Superset via [PR #37973](https://github.com/apache/superset/pull/37973) [[1]](https://github.com/apache/superset/pull/37973), but it requires **Flask-AppBuilder 5.2.0+** which includes the underlying API key support. If you're running from an older FAB version (or a Docker image that doesn't include the updated FAB), the feature won't appear. Here's what you need to confirm: 1. **Flask-AppBuilder version** — Verify you're running FAB ≥ 5.2.0. You can check with `pip show flask-appbuilder` inside your container. 2. **Both config AND feature flag are required** — Your config looks correct, but make sure both are set [[2]](https://github.com/apache/superset/pull/39440): ```python # superset_config.py FAB_API_KEY_ENABLED = True FAB_API_KEY_PREFIXES = ["sst_"] FEATURE_FLAGS = { "FAB_API_KEY_ENABLED": True, } ``` 3. **Database table creation** — The `ab_api_key` table must exist. After enabling the config, run: ```bash superset db upgrade superset init ``` 4. **Image version** — Since this feature was merged relatively recently, the `latest-dev` Docker image you're using may not include it yet depending on when it was built. Check if your image includes the [PR #37973](https://github.com/apache/superset/pull/37973) changes. The API Keys section should appear on the **User Info page** (`/user_info/`), not in a Security menu [[2]](https://github.com/apache/superset/pull/39440). If your FAB version is too old or the Docker image predates the merge, the UI simply won't render the API Keys panel. Also note there was a [critical bug fix in PR #39437](https://github.com/apache/superset/pull/39437) (merged April 2026) where API key authentication silently failed due to a wrong method name — so even if you get the UI working, make sure your build includes that fix too [[3]](https://github.com/apache/superset/pull/39437). <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=reply-with-mention&utm_term=apache%2Fsuperset).* --- Share context across your team and agents. Try [Dosu](https://dosu.dev?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-tagline&utm_term=apache%2Fsuperset). [](https://app.dosu.dev/response-feedback?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-feedback&utm_term=apache%2Fsuperset&message_id=c3e31153-a356-426a-8740-33b7f63ea9c2) [](https://github.dosu.com/apache/superset?utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-learn-repo&utm_term=apache%2Fsuperset) [](https://app.dosu.dev/signup?referrer=openSource&source=github-footer&utm_source=github&utm_medium=bot-comment&utm_campaign=github-comment-footer-20260415&utm_content=knowledge-infrastructure-add-team&utm_term=apache%2Fsuperset) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
