Error "unsupported hash type scrypt" appears when creating new user in Airflow Web UI

[amid-flice]

Apache Airflow version

3.0.2

If "Other Airflow 2 version" selected, which one?

No response

What happened?

After updating from 3.0.1 to 3.0.2 it is now impossible to create new user in Airflow Web UI: "unsupported hash type scrypt" error appears after click on "Save" button. Though it is still possible to create one via CLI (airflow users create) - in that case SHA-256 is used for password hashing by default (if not specified explicitly).

What you think should happen instead?

Creating user from Web UI and CLI should work similarly and use the same hash algo by default.

How to reproduce

Upgrade to 3.0.2

Operating System

Ubuntu 24.04.2 LTS

Versions of Apache Airflow Providers

No response

Deployment

Official Apache Airflow Helm Chart

Deployment details

No response

Anything else?

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[boring-cyborg]

Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.

[amid-flice]

Downgrading to 3.0.1 solved the issue

[potiuk]

Looks like it's a new version of Flask Application Builder (and fab provider) is causing it.

I have a workaround without downgrading:

Make sure that your webserver_config.py in "${HOME_AIRFLOW}" contains this row:

FAB_PASSWORD_HASH_METHOD="pbkdf2:sha256"

[potiuk]

I will work on a better fix as well.

[opeida]

@potiuk, thanks for the workaround! It fixes the problem.

airflow:
  apiServer:
    apiServerConfig: |
      FAB_PASSWORD_HASH_METHOD="pbkdf2:sha256"

[potiuk]

Cool. I thought initially it's the "old" error - but it is a new one in new version of FAB