airflow.providers.fab.auth_manager.middleware¶

Classes¶

FabAuthRolePublicMiddleware

Attach an anonymous user to unauthenticated requests when public access is enabled.

Module Contents¶

class airflow.providers.fab.auth_manager.middleware.FabAuthRolePublicMiddleware(app, dispatch=None)[source]¶

Bases: starlette.middleware.base.BaseHTTPMiddleware

Attach an anonymous user to unauthenticated requests when public access is enabled.

When [fab] auth_role_public (or the legacy AUTH_ROLE_PUBLIC entry in webserver_config.py) is set, requests that do not carry any authentication token get a pre-populated AnonymousUser assigned to request.state.user. The FastAPI get_user dependency picks it up before attempting JWT validation, which would otherwise reject the request with 401.

async dispatch(request, call_next)[source]¶