apache-airflow-providers-fab 1.1.1__tar.gz → 1.2.0__tar.gz

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: apache-airflow-providers-fab
-Version: 1.1.1
+Version: 1.2.0
 Summary: Provider package apache-airflow-providers-fab for Apache Airflow
 Keywords: airflow-provider,fab,airflow,integration
 Author-email: Apache Software Foundation <dev@airflow.apache.org>
@@ -22,14 +22,14 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: System :: Monitoring
 Requires-Dist: apache-airflow>=2.9.0
-Requires-Dist: flask-appbuilder==4.4.1
+Requires-Dist: flask-appbuilder==4.5.0
 Requires-Dist: flask-login>=0.6.2
 Requires-Dist: flask>=2.2,<2.3
 Requires-Dist: google-re2>=1.0
-Requires-Dist: jmespath
+Requires-Dist: jmespath>=0.7.0
 Project-URL: Bug Tracker, https://github.com/apache/airflow/issues
-Project-URL: Changelog, https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/changelog.html
-Project-URL: Documentation, https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1
+Project-URL: Changelog, https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/changelog.html
+Project-URL: Documentation, https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0
 Project-URL: Slack Chat, https://s.apache.org/airflow-slack
 Project-URL: Source Code, https://github.com/apache/airflow
 Project-URL: Twitter, https://twitter.com/ApacheAirflow
@@ -79,7 +79,7 @@ Project-URL: YouTube, https://www.youtube.com/channel/UCSXwxpWZQ7XZ1WL3wqevChA/
 
 Package ``apache-airflow-providers-fab``
 
-Release: ``1.1.1``
+Release: ``1.2.0``
 
 
 `Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__
@@ -92,7 +92,7 @@ This is a provider package for ``fab`` provider. All classes for this provider p
 are in ``airflow.providers.fab`` python package.
 
 You can find package information and changelog for the provider
-in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/>`_.
+in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/>`_.
 
 Installation
 ------------
@@ -111,11 +111,11 @@ PIP package           Version required
 ====================  ==================
 ``apache-airflow``    ``>=2.9.0``
 ``flask``             ``>=2.2,<2.3``
-``flask-appbuilder``  ``==4.4.1``
+``flask-appbuilder``  ``==4.5.0``
 ``flask-login``       ``>=0.6.2``
 ``google-re2``        ``>=1.0``
-``jmespath``
+``jmespath``          ``>=0.7.0``
 ====================  ==================
 
 The changelog for the provider package can be found in the
-`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/changelog.html>`_.
+`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/changelog.html>`_.

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/README.rst

@@ -42,7 +42,7 @@
 
 Package ``apache-airflow-providers-fab``
 
-Release: ``1.1.1``
+Release: ``1.2.0``
 
 
 `Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__
@@ -55,7 +55,7 @@ This is a provider package for ``fab`` provider. All classes for this provider p
 are in ``airflow.providers.fab`` python package.
 
 You can find package information and changelog for the provider
-in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/>`_.
+in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/>`_.
 
 Installation
 ------------
@@ -74,11 +74,11 @@ PIP package           Version required
 ====================  ==================
 ``apache-airflow``    ``>=2.9.0``
 ``flask``             ``>=2.2,<2.3``
-``flask-appbuilder``  ``==4.4.1``
+``flask-appbuilder``  ``==4.5.0``
 ``flask-login``       ``>=0.6.2``
 ``google-re2``        ``>=1.0``
-``jmespath``
+``jmespath``          ``>=0.7.0``
 ====================  ==================
 
 The changelog for the provider package can be found in the
-`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/changelog.html>`_.
+`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/changelog.html>`_.

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/airflow/providers/fab/LICENSE

@@ -215,7 +215,7 @@ Third party Apache 2.0 licenses
 
 The following components are provided under the Apache 2.0 License.
 See project link for details. The text of each license is also included
-at licenses/LICENSE-[project].txt.
+at 3rd-party-licenses/LICENSE-[project].txt.
 
     (ALv2 License) hue v4.3.0 (https://github.com/cloudera/hue/)
     (ALv2 License) jqclock v2.3.0 (https://github.com/JohnRDOrazio/jQuery-Clock-Plugin)
@@ -227,7 +227,7 @@ MIT licenses
 ========================================================================
 
 The following components are provided under the MIT License. See project link for details.
-The text of each license is also included at licenses/LICENSE-[project].txt.
+The text of each license is also included at 3rd-party-licenses/LICENSE-[project].txt.
 
     (MIT License) jquery v3.5.1 (https://jquery.org/license/)
     (MIT License) dagre-d3 v0.6.4 (https://github.com/cpettitt/dagre-d3)
@@ -243,11 +243,11 @@ The text of each license is also included at licenses/LICENSE-[project].txt.
 BSD 3-Clause licenses
 ========================================================================
 The following components are provided under the BSD 3-Clause license. See project links for details.
-The text of each license is also included at licenses/LICENSE-[project].txt.
+The text of each license is also included at 3rd-party-licenses/LICENSE-[project].txt.
 
     (BSD 3 License) d3 v5.16.0 (https://d3js.org)
     (BSD 3 License) d3-shape v2.1.0 (https://github.com/d3/d3-shape)
     (BSD 3 License) cgroupspy 0.2.1 (https://github.com/cloudsigma/cgroupspy)
 
 ========================================================================
-See licenses/LICENSES-ui.txt for packages used in `/airflow/www`
+See 3rd-party-licenses/LICENSES-ui.txt for packages used in `/airflow/www`

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/airflow/providers/fab/__init__.py

@@ -29,7 +29,7 @@ from airflow import __version__ as airflow_version
 
 __all__ = ["__version__"]
 
-__version__ = "1.1.1"
+__version__ = "1.2.0"
 
 if packaging.version.parse(packaging.version.parse(airflow_version).base_version) < packaging.version.parse(
     "2.9.0"

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/airflow/providers/fab/auth_manager/security_manager/override.py

@@ -57,8 +57,10 @@ from flask_appbuilder.security.views import (
     AuthOAuthView,
     AuthOIDView,
     AuthRemoteUserView,
+    AuthView,
     RegisterUserModelView,
 )
+from flask_appbuilder.views import expose
 from flask_babel import lazy_gettext
 from flask_jwt_extended import JWTManager, current_user as current_user_jwt
 from flask_login import LoginManager
@@ -123,6 +125,21 @@ log = logging.getLogger(__name__)
 MAX_NUM_DATABASE_USER_SESSIONS = 50000
 
 
+# The following class patches the logout method within AuthView, so it only supports POST method
+# to make CSRF protection effective. You could remove the patch and configure it when it is supported
+# natively by Flask-AppBuilder (https://github.com/dpgaspar/Flask-AppBuilder/issues/2248)
+
+
+class _ModifiedAuthView(AuthView):
+    @expose("/logout/", methods=["POST"])
+    def logout(self):
+        return super().logout()
+
+
+for auth_view in [AuthDBView, AuthLDAPView, AuthOAuthView, AuthOIDView, AuthRemoteUserView]:
+    auth_view.__bases__ = (_ModifiedAuthView,)
+
+
 class FabAirflowSecurityManagerOverride(AirflowSecurityManagerV2):
     """
     This security manager overrides the default AirflowSecurityManager security manager.
@@ -1506,14 +1523,15 @@ class FabAirflowSecurityManagerOverride(AirflowSecurityManagerV2):
             user.username = username
             user.email = email
             user.active = True
+            self.get_session.add(user)
             user.roles = role if isinstance(role, list) else [role]
             if hashed_password:
                 user.password = hashed_password
             else:
                 user.password = generate_password_hash(password)
-            self.get_session.add(user)
             self.get_session.commit()
             log.info(const.LOGMSG_INF_SEC_ADD_USER, username)
+
             return user
         except Exception as e:
             log.error(const.LOGMSG_ERR_SEC_ADD_USER, e)
@@ -2229,13 +2247,17 @@ class FabAirflowSecurityManagerOverride(AirflowSecurityManagerV2):
             me = self.oauth_remotes[provider].get("userinfo")
             data = me.json()
             log.debug("User info from Okta: %s", data)
-            return {
-                "username": f"{provider}_{data['sub']}",
-                "first_name": data.get("given_name", ""),
-                "last_name": data.get("family_name", ""),
-                "email": data["email"],
-                "role_keys": data.get("groups", []),
-            }
+            if "error" not in data:
+                return {
+                    "username": f"{provider}_{data['sub']}",
+                    "first_name": data.get("given_name", ""),
+                    "last_name": data.get("family_name", ""),
+                    "email": data["email"],
+                    "role_keys": data.get("groups", []),
+                }
+            else:
+                log.error(data.get("error_description"))
+            return {}
         # for Auth0
         if provider == "auth0":
             data = self.appbuilder.sm.oauth_remotes[provider].userinfo()
@@ -2258,8 +2280,8 @@ class FabAirflowSecurityManagerOverride(AirflowSecurityManagerV2):
                 "first_name": data.get("given_name", ""),
                 "last_name": data.get("family_name", ""),
                 "email": data.get("email", ""),
+                "role_keys": data.get("groups", []),
             }
-
         # for Authentik
         if provider == "authentik":
             id_token = resp["id_token"]

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/airflow/providers/fab/get_provider_info.py

@@ -28,15 +28,15 @@ def get_provider_info():
         "name": "Fab",
         "description": "`Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__\n",
         "state": "ready",
-        "source-date-epoch": 1716287750,
-        "versions": ["1.1.1", "1.1.0", "1.0.4", "1.0.3", "1.0.2", "1.0.1", "1.0.0"],
+        "source-date-epoch": 1718604369,
+        "versions": ["1.2.0", "1.1.1", "1.1.0", "1.0.4", "1.0.3", "1.0.2", "1.0.1", "1.0.0"],
         "dependencies": [
             "apache-airflow>=2.9.0",
             "flask>=2.2,<2.3",
-            "flask-appbuilder==4.4.1",
+            "flask-appbuilder==4.5.0",
             "flask-login>=0.6.2",
             "google-re2>=1.0",
-            "jmespath",
+            "jmespath>=0.7.0",
         ],
         "config": {
             "fab": {
@@ -44,21 +44,21 @@ def get_provider_info():
                 "options": {
                     "auth_rate_limited": {
                         "description": "Boolean for enabling rate limiting on authentication endpoints.\n",
-                        "version_added": "1.0.0",
+                        "version_added": "1.0.2",
                         "type": "boolean",
                         "example": None,
                         "default": "True",
                     },
                     "auth_rate_limit": {
                         "description": "Rate limit for authentication endpoints.\n",
-                        "version_added": "2.6.0",
+                        "version_added": "1.0.2",
                         "type": "string",
                         "example": None,
                         "default": "5 per 40 second",
                     },
                     "update_fab_perms": {
                         "description": "Update FAB permissions and sync security manager roles\non webserver startup\n",
-                        "version_added": "1.10.7",
+                        "version_added": "1.0.2",
                         "type": "string",
                         "example": None,
                         "default": "True",

{apache_airflow_providers_fab-1.1.1 → apache_airflow_providers_fab-1.2.0}/pyproject.toml

@@ -28,7 +28,7 @@ build-backend = "flit_core.buildapi"
 
 [project]
 name = "apache-airflow-providers-fab"
-version = "1.1.1"
+version = "1.2.0"
 description = "Provider package apache-airflow-providers-fab for Apache Airflow"
 readme = "README.rst"
 authors = [
@@ -57,16 +57,16 @@ classifiers = [
 requires-python = "~=3.8"
 dependencies = [
     "apache-airflow>=2.9.0",
-    "flask-appbuilder==4.4.1",
+    "flask-appbuilder==4.5.0",
     "flask-login>=0.6.2",
     "flask>=2.2,<2.3",
     "google-re2>=1.0",
-    "jmespath",
+    "jmespath>=0.7.0",
 ]
 
 [project.urls]
-"Documentation" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1"
-"Changelog" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/1.1.1/changelog.html"
+"Documentation" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0"
+"Changelog" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/1.2.0/changelog.html"
 "Bug Tracker" = "https://github.com/apache/airflow/issues"
 "Source Code" = "https://github.com/apache/airflow"
 "Slack Chat" = "https://s.apache.org/airflow-slack"