Skip to content

Conversation

@choo121600
Copy link
Member

Add AIRFLOW__API_AUTH__JWT_ISSUER configuration to docker-compose.yaml and breeze shell environment for consistent JWT authentication.

Why

After #61278 , the JWT tokens omit the iss claim when issuer is unset, causing authentication failures in E2E tests.

image

Change

  • airflow-core/docs/howto/docker-compose/docker-compose.yaml: Add AIRFLOW__API_AUTH__JWT_ISSUER environment variable
  • dev/breeze/src/airflow_breeze/params/shell_params.py: Add AIRFLOW__API_AUTH__JWT_ISSUER to breeze environment setup

Was generative AI tooling used to co-author this PR?
  • Yes (please specify the tool below)

  • Read the Pull Request Guidelines for more information. Note: commit author/co-author name and email in commits become permanently public when merged.
  • For fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
  • When adding dependency, check compliance with the ASF 3rd Party License Policy.
  • For significant user-facing changes create newsfragment: {pr_number}.significant.rst or {issue_number}.significant.rst, in airflow-core/newsfragments.

Copy link
Member

@potiuk potiuk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice!

@potiuk potiuk force-pushed the fix/add-jwt-issuer branch from f2e6a34 to 25f415d Compare February 3, 2026 13:22
@choo121600 choo121600 merged commit c3b5c66 into apache:main Feb 3, 2026
129 checks passed
@github-actions
Copy link

github-actions bot commented Feb 3, 2026

Backport failed to create: v3-1-test. View the failure log Run details

Status Branch Result
v3-1-test Commit Link

You can attempt to backport this manually by running:

cherry_picker c3b5c66 v3-1-test

This should apply the commit to the v3-1-test branch and leave the commit in conflict state marking
the files that need manual conflict resolution.

After you have resolved the conflicts, you can continue the backport process by running:

cherry_picker --continue

If you don't have cherry-picker installed, see the installation guide.

potiuk pushed a commit to potiuk/airflow that referenced this pull request Feb 3, 2026
…nment (apache#61385)

(cherry picked from commit c3b5c66)

Co-authored-by: Yeonguk Choo <choo121600@gmail.com>
potiuk added a commit that referenced this pull request Feb 3, 2026
…nment (#61385) (#61410)

(cherry picked from commit c3b5c66)

Co-authored-by: Yeonguk Choo <choo121600@gmail.com>
@choo121600 choo121600 deleted the fix/add-jwt-issuer branch February 4, 2026 04:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dev-tools backport-to-v3-1-test Mark PR with this label to backport to v3-1-test branch kind:documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants