Skip to content

Commit 62aaeb4

Browse files
potiukCloud Composer Team
authored andcommitted
Fix default setting for hash algorithm for FAB password hash (#51858)
The dpgaspar/Flask-AppBuilder#2332 introduced new configuration parameter, where it defaulted hash algorithm for passwords to "scrypt". However with our (old) version of Werkzeug, scrypt is not supported and default should be set to "pbkdf2:sha256" Fixes: 51854 GitOrigin-RevId: 7cecc66069a2588dfaba95a030f09076552c4c68
1 parent 0d6638d commit 62aaeb4

File tree

1 file changed

+2
-0
lines changed
  • providers/fab/src/airflow/providers/fab/auth_manager/security_manager

1 file changed

+2
-0
lines changed

providers/fab/src/airflow/providers/fab/auth_manager/security_manager/override.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -784,12 +784,14 @@ def _init_config(self):
784784

785785
parsed_werkzeug_version = Version(werkzeug_version)
786786
if parsed_werkzeug_version < Version("3.0.0"):
787+
app.config.setdefault("FAB_PASSWORD_HASH_METHOD", "pbkdf2:sha256")
787788
app.config.setdefault(
788789
"AUTH_DB_FAKE_PASSWORD_HASH_CHECK",
789790
"pbkdf2:sha256:150000$Z3t6fmj2$22da622d94a1f8118"
790791
"c0976a03d2f18f680bfff877c9a965db9eedc51bc0be87c",
791792
)
792793
else:
794+
app.config.setdefault("FAB_PASSWORD_HASH_METHOD", "scrypt")
793795
app.config.setdefault(
794796
"AUTH_DB_FAKE_PASSWORD_HASH_CHECK",
795797
"scrypt:32768:8:1$wiDa0ruWlIPhp9LM$6e409d093e62ad54df2af895d0e125b05ff6cf6414"

0 commit comments

Comments
 (0)