apache-airflow-providers-fab 2.4.4rc1__tar.gz → 3.0.0__tar.gz

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apache-airflow-providers-fab
-Version: 2.4.4rc1
+Version: 3.0.0
 Summary: Provider package apache-airflow-providers-fab for Apache Airflow
 Keywords: airflow-provider,fab,airflow,integration
 Author-email: Apache Software Foundation <dev@airflow.apache.org>
@@ -21,13 +21,16 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: System :: Monitoring
 License-File: 3rd-party-licenses/LICENSES-ui.txt
 License-File: NOTICE
-Requires-Dist: apache-airflow>=3.0.2rc1
-Requires-Dist: apache-airflow-providers-common-compat>=1.2.1rc1
+Requires-Dist: apache-airflow>=3.0.2
+Requires-Dist: apache-airflow-providers-common-compat>=1.2.1
 Requires-Dist: blinker>=1.6.2; python_version < '3.13'
 Requires-Dist: flask>=2.2.1,<2.3; python_version < '3.13'
-Requires-Dist: flask-appbuilder==4.6.3; python_version < '3.13'
+Requires-Dist: flask-appbuilder==5.0.0; python_version < '3.13'
 Requires-Dist: flask-login>=0.6.2; python_version < '3.13'
-Requires-Dist: flask-session>=0.4.0,<0.6; python_version < '3.13'
+Requires-Dist: flask-session>=0.8.0; python_version < '3.13'
+Requires-Dist: msgpack>=1.0.0; python_version < '3.13'
+Requires-Dist: flask-sqlalchemy>=3.0.5; python_version < '3.13'
+Requires-Dist: sqlalchemy<2; python_version < '3.13'
 Requires-Dist: flask-wtf>=1.1.0; python_version < '3.13'
 Requires-Dist: connexion[flask]>=2.14.2,<3.0; python_version < '3.13'
 Requires-Dist: jmespath>=0.7.0; python_version < '3.13'
@@ -36,8 +39,8 @@ Requires-Dist: wtforms>=3.0,<4; python_version < '3.13'
 Requires-Dist: flask_limiter>3,<4,!=3.13
 Requires-Dist: kerberos>=1.3.0 ; extra == "kerberos" and ( python_version < '3.13')
 Project-URL: Bug Tracker, https://github.com/apache/airflow/issues
-Project-URL: Changelog, https://airflow.staged.apache.org/docs/apache-airflow-providers-fab/2.4.4/changelog.html
-Project-URL: Documentation, https://airflow.staged.apache.org/docs/apache-airflow-providers-fab/2.4.4
+Project-URL: Changelog, https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/changelog.html
+Project-URL: Documentation, https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0
 Project-URL: Mastodon, https://fosstodon.org/@airflow
 Project-URL: Slack Chat, https://s.apache.org/airflow-slack
 Project-URL: Source Code, https://github.com/apache/airflow
@@ -69,7 +72,7 @@ Provides-Extra: kerberos
 
 Package ``apache-airflow-providers-fab``
 
-Release: ``2.4.4``
+Release: ``3.0.0``
 
 
 `Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__
@@ -82,7 +85,7 @@ This is a provider package for ``fab`` provider. All classes for this provider p
 are in ``airflow.providers.fab`` python package.
 
 You can find package information and changelog for the provider
-in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/2.4.4/>`_.
+in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/>`_.
 
 Installation
 ------------
@@ -103,9 +106,12 @@ PIP package                                 Version required
 ``apache-airflow-providers-common-compat``  ``>=1.2.1``
 ``blinker``                                 ``>=1.6.2; python_version < "3.13"``
 ``flask``                                   ``>=2.2.1,<2.3; python_version < "3.13"``
-``flask-appbuilder``                        ``==4.6.3; python_version < "3.13"``
+``flask-appbuilder``                        ``==5.0.0; python_version < "3.13"``
 ``flask-login``                             ``>=0.6.2; python_version < "3.13"``
-``flask-session``                           ``>=0.4.0,<0.6; python_version < "3.13"``
+``flask-session``                           ``>=0.8.0; python_version < "3.13"``
+``msgpack``                                 ``>=1.0.0; python_version < "3.13"``
+``flask-sqlalchemy``                        ``>=3.0.5; python_version < "3.13"``
+``sqlalchemy``                              ``<2; python_version < "3.13"``
 ``flask-wtf``                               ``>=1.1.0; python_version < "3.13"``
 ``connexion[flask]``                        ``>=2.14.2,<3.0; python_version < "3.13"``
 ``jmespath``                                ``>=0.7.0; python_version < "3.13"``
@@ -143,5 +149,5 @@ Extra         Dependencies
 ============  ============================================
 
 The changelog for the provider package can be found in the
-`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/2.4.4/changelog.html>`_.
+`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/changelog.html>`_.
 

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/README.rst

@@ -23,7 +23,7 @@
 
 Package ``apache-airflow-providers-fab``
 
-Release: ``2.4.4``
+Release: ``3.0.0``
 
 
 `Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__
@@ -36,7 +36,7 @@ This is a provider package for ``fab`` provider. All classes for this provider p
 are in ``airflow.providers.fab`` python package.
 
 You can find package information and changelog for the provider
-in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/2.4.4/>`_.
+in the `documentation <https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/>`_.
 
 Installation
 ------------
@@ -57,9 +57,12 @@ PIP package                                 Version required
 ``apache-airflow-providers-common-compat``  ``>=1.2.1``
 ``blinker``                                 ``>=1.6.2; python_version < "3.13"``
 ``flask``                                   ``>=2.2.1,<2.3; python_version < "3.13"``
-``flask-appbuilder``                        ``==4.6.3; python_version < "3.13"``
+``flask-appbuilder``                        ``==5.0.0; python_version < "3.13"``
 ``flask-login``                             ``>=0.6.2; python_version < "3.13"``
-``flask-session``                           ``>=0.4.0,<0.6; python_version < "3.13"``
+``flask-session``                           ``>=0.8.0; python_version < "3.13"``
+``msgpack``                                 ``>=1.0.0; python_version < "3.13"``
+``flask-sqlalchemy``                        ``>=3.0.5; python_version < "3.13"``
+``sqlalchemy``                              ``<2; python_version < "3.13"``
 ``flask-wtf``                               ``>=1.1.0; python_version < "3.13"``
 ``connexion[flask]``                        ``>=2.14.2,<3.0; python_version < "3.13"``
 ``jmespath``                                ``>=0.7.0; python_version < "3.13"``
@@ -97,4 +100,4 @@ Extra         Dependencies
 ============  ============================================
 
 The changelog for the provider package can be found in the
-`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/2.4.4/changelog.html>`_.
+`changelog <https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/changelog.html>`_.

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/docs/changelog.rst

@@ -20,6 +20,35 @@
 Changelog
 ---------
 
+3.0.0
+.....
+
+Breaking changes
+~~~~~~~~~~~~~~~~
+
+Migrated to Flask-appbuilder 5 which removed the authentication type ``AUTH_OID``.
+Using the authentication type ``AUTH_OID`` in fab provider is no longer possible.
+Applications using ``AUTH_TYPE = AUTH_OID`` must migrate to ``AUTH_OAUTH``.
+
+* ``Upgrade flask-appbuilder to version 5 (#50960)``
+
+Features
+~~~~~~~~
+
+* ``Support nested groups resolution for LDAP authentication in Fab auth manager``
+
+Bug Fixes
+~~~~~~~~~
+
+* ``Add 'if_not_exists=True' to FAB migration (#56100)``
+* ``Add if_not_exists to index creation in migrations (#56328)``
+
+.. Below changes are excluded from the changelog. Move them to
+   appropriate section above if needed. Do not delete the lines(!):
+   * ``Fix static check error resulting from not rebased change in FAB5 (#56178)``
+   * ``Remove placeholder Release Date in changelog and index files (#56056)``
+   * ``Prepare fab and amazon providers to release (September 2025) (#56241)``
+
 2.4.4
 .....
 
@@ -47,8 +76,6 @@ Doc-only
 .....
 
 
-Release Date: ``|PypiReleaseDate|``
-
 Bug Fixes
 ~~~~~~~~~
 
@@ -69,8 +96,6 @@ Misc
 .....
 
 
-Release Date: ``|PypiReleaseDate|``
-
 Bug Fixes
 ~~~~~~~~~
 

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/docs/index.rst

@@ -84,7 +84,7 @@ apache-airflow-providers-fab package
 `Flask App Builder <https://flask-appbuilder.readthedocs.io/>`__
 
 
-Release: 2.4.4
+Release: 3.0.0
 
 Provider package
 ----------------
@@ -111,9 +111,12 @@ PIP package                                 Version required
 ``apache-airflow-providers-common-compat``  ``>=1.2.1``
 ``blinker``                                 ``>=1.6.2; python_version < "3.13"``
 ``flask``                                   ``>=2.2.1,<2.3; python_version < "3.13"``
-``flask-appbuilder``                        ``==4.6.3; python_version < "3.13"``
+``flask-appbuilder``                        ``==5.0.0; python_version < "3.13"``
 ``flask-login``                             ``>=0.6.2; python_version < "3.13"``
-``flask-session``                           ``>=0.4.0,<0.6; python_version < "3.13"``
+``flask-session``                           ``>=0.8.0; python_version < "3.13"``
+``msgpack``                                 ``>=1.0.0; python_version < "3.13"``
+``flask-sqlalchemy``                        ``>=3.0.5; python_version < "3.13"``
+``sqlalchemy``                              ``<2; python_version < "3.13"``
 ``flask-wtf``                               ``>=1.1.0; python_version < "3.13"``
 ``connexion[flask]``                        ``>=2.14.2,<3.0; python_version < "3.13"``
 ``jmespath``                                ``>=0.7.0; python_version < "3.13"``
@@ -147,5 +150,5 @@ Downloading official packages
 You can download officially released packages and verify their checksums and signatures from the
 `Official Apache Download site <https://downloads.apache.org/airflow/providers/>`_
 
-* `The apache-airflow-providers-fab 2.4.4 sdist package <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4.tar.gz>`_ (`asc <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4.tar.gz.asc>`__, `sha512 <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4.tar.gz.sha512>`__)
-* `The apache-airflow-providers-fab 2.4.4 wheel package <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4-py3-none-any.whl>`_ (`asc <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4-py3-none-any.whl.asc>`__, `sha512 <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-2.4.4-py3-none-any.whl.sha512>`__)
+* `The apache-airflow-providers-fab 3.0.0 sdist package <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0.tar.gz>`_ (`asc <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0.tar.gz.asc>`__, `sha512 <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0.tar.gz.sha512>`__)
+* `The apache-airflow-providers-fab 3.0.0 wheel package <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0-py3-none-any.whl>`_ (`asc <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0-py3-none-any.whl.asc>`__, `sha512 <https://downloads.apache.org/airflow/providers/apache_airflow_providers_fab-3.0.0-py3-none-any.whl.sha512>`__)

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/provider.yaml

@@ -28,13 +28,14 @@ description: |
 # For providers until we think it should be released.
 state: ready
 
-source-date-epoch: 1758734932
+source-date-epoch: 1759212936
 
 # Note that those versions are maintained by release manager - do not update them manually
 # with the exception of case where other provider in sources has >= new provider version.
 # In such case adding >= NEW_VERSION and bumping to NEW_VERSION in a provider have
 # to be done in the same PR
 versions:
+  - 3.0.0
   - 2.4.4
   - 2.4.3
   - 2.4.2

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/pyproject.toml

@@ -25,7 +25,7 @@ build-backend = "flit_core.buildapi"
 
 [project]
 name = "apache-airflow-providers-fab"
-version = "2.4.4rc1"
+version = "3.0.0"
 description = "Provider package apache-airflow-providers-fab for Apache Airflow"
 readme = "README.rst"
 authors = [
@@ -56,8 +56,8 @@ license-files = ["NOTICE", "*/LICENSE*"]
 # Make sure to run ``prek update-providers-dependencies --all-files``
 # After you modify the dependencies, and rebuild your Breeze CI image with ``breeze ci-image build``
 dependencies = [
-    "apache-airflow>=3.0.2rc1",
-    "apache-airflow-providers-common-compat>=1.2.1rc1",
+    "apache-airflow>=3.0.2",
+    "apache-airflow-providers-common-compat>=1.2.1",
     # Blinker use for signals in Flask, this is an optional dependency in Flask 2.2 and lower.
     # In Flask 2.3 it becomes a mandatory dependency, and flask signals are always available.
     "blinker>=1.6.2; python_version < '3.13'",
@@ -70,11 +70,14 @@ dependencies = [
     # Every time we update FAB version here, please make sure that you review the classes and models in
     # `airflow/providers/fab/auth_manager/security_manager/override.py` with their upstream counterparts.
     # In particular, make sure any breaking changes, for example any new methods, are accounted for.
-    "flask-appbuilder==4.6.3; python_version < '3.13'",
+    "flask-appbuilder==5.0.0; python_version < '3.13'",
     "flask-login>=0.6.2; python_version < '3.13'",
     # Flask-Session 0.6 add new arguments into the SqlAlchemySessionInterface constructor as well as
     # all parameters now are mandatory which make AirflowDatabaseSessionInterface incompatible with this version.
-    "flask-session>=0.4.0,<0.6; python_version < '3.13'",
+    "flask-session>=0.8.0; python_version < '3.13'",
+    "msgpack>=1.0.0; python_version < '3.13'",
+    "flask-sqlalchemy>=3.0.5; python_version < '3.13'",
+    "sqlalchemy<2; python_version < '3.13'",
     "flask-wtf>=1.1.0; python_version < '3.13'",
     "connexion[flask]>=2.14.2,<3.0; python_version < '3.13'",
     "jmespath>=0.7.0; python_version < '3.13'",
@@ -130,8 +133,8 @@ apache-airflow-providers-common-sql = {workspace = true}
 apache-airflow-providers-standard = {workspace = true}
 
 [project.urls]
-"Documentation" = "https://airflow.staged.apache.org/docs/apache-airflow-providers-fab/2.4.4"
-"Changelog" = "https://airflow.staged.apache.org/docs/apache-airflow-providers-fab/2.4.4/changelog.html"
+"Documentation" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0"
+"Changelog" = "https://airflow.apache.org/docs/apache-airflow-providers-fab/3.0.0/changelog.html"
 "Bug Tracker" = "https://github.com/apache/airflow/issues"
 "Source Code" = "https://github.com/apache/airflow"
 "Slack Chat" = "https://s.apache.org/airflow-slack"

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/__init__.py

@@ -29,7 +29,7 @@ from airflow import __version__ as airflow_version
 
 __all__ = ["__version__"]
 
-__version__ = "2.4.4"
+__version__ = "3.0.0"
 
 if packaging.version.parse(packaging.version.parse(airflow_version).base_version) < packaging.version.parse(
     "3.0.2"

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/api_endpoints/role_and_permission_endpoint.py

@@ -72,7 +72,7 @@ def get_role(*, role_name: str) -> APIResponse:
 def get_roles(*, order_by: str = "name", limit: int, offset: int | None = None) -> APIResponse:
     """Get roles."""
     security_manager = cast("FabAuthManager", get_auth_manager()).security_manager
-    session = security_manager.get_session
+    session = security_manager.session
     total_entries = session.scalars(select(func.count(Role.id))).one()
     direction = desc if order_by.startswith("-") else asc
     to_replace = {"role_id": "id"}
@@ -99,7 +99,7 @@ def get_roles(*, order_by: str = "name", limit: int, offset: int | None = None)
 def get_permissions(*, limit: int, offset: int | None = None) -> APIResponse:
     """Get permissions."""
     security_manager = cast("FabAuthManager", get_auth_manager()).security_manager
-    session = security_manager.get_session
+    session = security_manager.session
     total_entries = session.scalars(select(func.count(Action.id))).one()
     query = select(Action)
     actions = session.scalars(query.offset(offset).limit(limit)).all()

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/api_endpoints/user_endpoint.py

@@ -56,10 +56,10 @@ def get_user(*, username: str) -> APIResponse:
 
 @requires_access_custom_view("GET", permissions.RESOURCE_USER)
 @format_parameters({"limit": check_limit})
-def get_users(*, limit: int, order_by: str = "id", offset: str | None = None) -> APIResponse:
+def get_users(*, limit: int, order_by: str = "id", offset: int | None = None) -> APIResponse:
     """Get users."""
     security_manager = cast("FabAuthManager", get_auth_manager()).security_manager
-    session = security_manager.get_session
+    session = security_manager.session
     total_entries = session.execute(select(func.count(User.id))).scalar()
     direction = desc if order_by.startswith("-") else asc
     to_replace = {"user_id": "id"}
@@ -212,7 +212,7 @@ def delete_user(*, username: str) -> APIResponse:
         raise NotFound(title="User not found", detail=detail)
 
     user.roles = []  # Clear foreign keys on this user first.
-    security_manager.get_session.delete(user)
-    security_manager.get_session.commit()
+    security_manager.session.delete(user)
+    security_manager.session.commit()
 
     return NoContent, HTTPStatus.NO_CONTENT

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/api_fastapi/routes/login.py

@@ -23,6 +23,7 @@ from airflow.api_fastapi.core_api.openapi.exceptions import create_openapi_http_
 from airflow.configuration import conf
 from airflow.providers.fab.auth_manager.api_fastapi.datamodels.login import LoginBody, LoginResponse
 from airflow.providers.fab.auth_manager.api_fastapi.services.login import FABAuthManagerLogin
+from airflow.providers.fab.auth_manager.cli_commands.utils import get_application_builder
 
 login_router = AirflowRouter(tags=["FabAuthManager"])
 
@@ -35,7 +36,8 @@ login_router = AirflowRouter(tags=["FabAuthManager"])
 )
 def create_token(body: LoginBody) -> LoginResponse:
     """Generate a new API token."""
-    return FABAuthManagerLogin.create_token(body=body)
+    with get_application_builder():
+        return FABAuthManagerLogin.create_token(body=body)
 
 
 @login_router.post(
@@ -46,6 +48,7 @@ def create_token(body: LoginBody) -> LoginResponse:
 )
 def create_token_cli(body: LoginBody) -> LoginResponse:
     """Generate a new CLI API token."""
-    return FABAuthManagerLogin.create_token(
-        body=body, expiration_time_in_seconds=conf.getint("api_auth", "jwt_cli_expiration_time")
-    )
+    with get_application_builder():
+        return FABAuthManagerLogin.create_token(
+            body=body, expiration_time_in_seconds=conf.getint("api_auth", "jwt_cli_expiration_time")
+        )

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/cli_commands/user_command.py

@@ -144,9 +144,8 @@ def users_delete(args):
 @providers_configuration_loaded
 def users_manage_role(args, remove=False):
     """Delete or appends user roles."""
-    user = _find_user(args)
-
     with get_application_builder() as appbuilder:
+        user = _find_user(args)
         role = appbuilder.sm.find_role(args.role)
         if not role:
             valid_roles = appbuilder.sm.get_all_roles()

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/cli_commands/utils.py

@@ -25,6 +25,7 @@ from os.path import isabs
 from typing import TYPE_CHECKING
 
 from flask import Flask
+from flask_sqlalchemy import SQLAlchemy
 from sqlalchemy.engine import make_url
 
 import airflow
@@ -39,11 +40,11 @@ if TYPE_CHECKING:
 
 
 @cache
-def _return_appbuilder(app: Flask) -> AirflowAppBuilder:
+def _return_appbuilder(app: Flask, db) -> AirflowAppBuilder:
     """Return an appbuilder instance for the given app."""
     init_appbuilder(app, enable_plugins=False)
     init_plugins(app)
-    init_airflow_session_interface(app)
+    init_airflow_session_interface(app, db)
     return app.appbuilder  # type: ignore[attr-defined]
 
 
@@ -63,4 +64,7 @@ def get_application_builder() -> Generator[AirflowAppBuilder, None, None]:
                 "Please use absolute path such as `sqlite:////tmp/airflow.db`."
             )
         flask_app.config["SQLALCHEMY_TRACK_MODIFICATIONS"] = False
-        yield _return_appbuilder(flask_app)
+
+        db = SQLAlchemy(flask_app)
+        yield _return_appbuilder(flask_app, db)
+        db.engine.dispose(close=True)

{apache_airflow_providers_fab-2.4.4rc1 → apache_airflow_providers_fab-3.0.0}/src/airflow/providers/fab/auth_manager/fab_auth_manager.py

@@ -26,7 +26,7 @@ from urllib.parse import urljoin
 import packaging.version
 from connexion import FlaskApi
 from fastapi import FastAPI
-from flask import Blueprint, g
+from flask import Blueprint, current_app, g
 from sqlalchemy import select
 from sqlalchemy.orm import Session, joinedload
 from starlette.middleware.wsgi import WSGIMiddleware
@@ -282,7 +282,7 @@ class FabAuthManager(BaseAuthManager[User]):
 
     def deserialize_user(self, token: dict[str, Any]) -> User:
         with create_session() as session:
-            return session.get(User, int(token["sub"]))
+            return session.scalars(select(User).where(User.id == int(token["sub"]))).one()
 
     def serialize_user(self, user: User) -> dict[str, Any]:
         return {"sub": str(user.id)}
@@ -292,7 +292,7 @@ class FabAuthManager(BaseAuthManager[User]):
         user = self.get_user()
         return (
             self.appbuilder
-            and self.appbuilder.get_app.config.get("AUTH_ROLE_PUBLIC", None)
+            and self.appbuilder.app.config.get("AUTH_ROLE_PUBLIC", None)
             or (not user.is_anonymous and user.is_active)
         )
 
@@ -470,14 +470,18 @@ class FabAuthManager(BaseAuthManager[User]):
             return {dag.dag_id for dag in session.execute(select(DagModel.dag_id))}
         if isinstance(user, AnonymousUser):
             return set()
-        user_query = session.scalar(
-            select(User)
-            .options(
-                joinedload(User.roles)
-                .subqueryload(Role.permissions)
-                .options(joinedload(Permission.action), joinedload(Permission.resource))
+        user_query = (
+            session.scalars(
+                select(User)
+                .options(
+                    joinedload(User.roles)
+                    .subqueryload(Role.permissions)
+                    .options(joinedload(Permission.action), joinedload(Permission.resource))
+                )
+                .where(User.id == user.id)
             )
-            .where(User.id == user.id)
+            .unique()
+            .one()
         )
         roles = user_query.roles
 
@@ -547,7 +551,7 @@ class FabAuthManager(BaseAuthManager[User]):
         if not self.appbuilder:
             raise AirflowException("AppBuilder is not initialized.")
 
-        sm_from_config = self.appbuilder.get_app.config.get("SECURITY_MANAGER_CLASS")
+        sm_from_config = current_app.config.get("SECURITY_MANAGER_CLASS")
         if sm_from_config:
             if not issubclass(sm_from_config, FabAirflowSecurityManagerOverride):
                 raise AirflowConfigException(