From 3dc11f28c8071da678ee567eccce3aed0ac11db3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20B=C3=B6ttcher?= <c.boettcher@fz-juelich.de>
Date: Tue, 19 Sep 2023 10:26:46 +0200
Subject: [PATCH] add short description about the plugin
---
plugins/unity_integration.py | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/plugins/unity_integration.py b/plugins/unity_integration.py
index 97d942f..65f81e4 100644
--- a/plugins/unity_integration.py
+++ b/plugins/unity_integration.py
@@ -25,6 +25,14 @@ oauth.register(
unity = Blueprint('unity', __name__, url_prefix="/unity")
class UnityIntegrationView(AppBuilderBaseView):
+ '''
+ This adds the neccessary routes for a oauth2 login support in addition to the basic_auth provided by airflow.
+ This is achieved by handling the oauth2 flow fully via the added routes nad using the basic_auth via internal functions.
+ Once a user has been authenticated, a matching user (via username or email) is either found or created in the airflow basic_auth database.
+
+ This means that the Oauth2 provider needs to be trusted to the same extent that the local user db is trusted.
+ This can also break on airflow updates without notice, as airflow-internal security functions are used, that are not well-documented and appear to not be intended for this use.
+ '''
@unity.route('/')
@unity.route('/login')
--
GitLab