Skip to content

Make KeycloakJWTMiddleware inherit from JWTRefreshMiddleware - #70707

Draft
stephen-bracken wants to merge 1 commit into
apache:mainfrom
stephen-bracken:pass-request
Draft

stephen-bracken wants to merge 1 commit into
apache:mainfrom
stephen-bracken:pass-request

Conversation

@stephen-bracken

@stephen-bracken stephen-bracken commented Jul 29, 2026 •

Copy link
Copy Markdown
Contributor

related: #70550 #70783

Get Keycloak JWT from request cookies in get_user_from_token

Make KeycloakAuthManager._get_jwt_middleware() return KeycloakJWTMiddleware, inheriting from JWTRefreshMiddleware to maintain the jwt flow and remove bypassing the flow in the base middleware.

Was generative AI tooling used to co-author this PR?
  • Yes (please specify the tool below)
  • No

@stephen-bracken stephen-bracken changed the title Resolve Keycloak tokens from request cookies in get_user_from_token() Resolve Keycloak tokens from request cookies in KeycloakAuthManager.get_user_from_token(), add request object to resolve_user_from_token() Jul 29, 2026
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 4 times, most recently from 1c0cc45 to 1a9cf0d Compare July 29, 2026 23:38
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 3 times, most recently from bf78928 to 3669a91 Compare July 30, 2026 10:15
@stephen-bracken stephen-bracken changed the title Resolve Keycloak tokens from request cookies in KeycloakAuthManager.get_user_from_token(), add request object to resolve_user_from_token() Override JWTRefreshMiddleware in KeycloakAuthManager to handle Keycloak JWT Cookies Jul 30, 2026
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 4 times, most recently from d225f24 to bf8b4ff Compare July 31, 2026 14:56
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 2 times, most recently from 7cdf80a to 5909a7c Compare July 31, 2026 18:46
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 6 times, most recently from 4231c16 to 7064369 Compare August 12, 2026 19:21
@stephen-bracken stephen-bracken changed the title Override JWTRefreshMiddleware in KeycloakAuthManager to handle Keycloak JWT Cookies Make KeycloakJWTMiddleware inherit from JWTRefreshMiddleware Aug 12, 2026
@stephen-bracken
stephen-bracken force-pushed the pass-request branch 3 times, most recently from 95a2c08 to 352362f Compare August 12, 2026 19:33
Comment thread airflow-core/src/airflow/__init__.py Resolved
@github-actions

github-actions Bot commented Nov 7, 2026 •

Copy link
Copy Markdown
Contributor

Fork CI: failed. CI for the latest commit failed in your fork. Fix the failures and push again; this pull request stays a draft until the run is green.

Pull requests from contributors run their CI in the contributor's own fork. GitHub Actions is free and has no minute limit on public forks, while the CI capacity of the Apache Software Foundation is shared by every ASF project and is finite.

Latest run: https://github.com/stephen-bracken/airflow/actions/runs/42434001342

How this works: fork CI for external contributors.


This comment was posted automatically by the fork CI monitor from templates drafted with an AI-assisted tool, so it may contain mistakes. An Apache Airflow maintainer, a real person, will review the pull request once its fork CI is green. Why the first pass is automated.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:API Airflow's REST/HTTP API area:providers fork ci required Gated by AIP-120: CI must pass in the contributor's fork. Managed by the fork CI reconciler. provider:keycloak

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants