Fix static check (apache#47302)

Author: jason810496

airflow/api_fastapi/core_api/openapi/v1-generated.yaml

@@ -6697,6 +6697,8 @@ paths:
       summary: Get Log
       description: Get logs for a specific task instance.
       operationId: get_log
+      security:
+      - OAuth2PasswordBearer: []
       parameters:
       - name: dag_id
         in: path

airflow/api_fastapi/core_api/routes/public/log.py

@@ -19,7 +19,7 @@
 
 import textwrap
 
-from fastapi import HTTPException, Request, Response, status
+from fastapi import Depends, HTTPException, Request, Response, status
 from itsdangerous import BadSignature, URLSafeSerializer
 from pydantic import PositiveInt
 from sqlalchemy.orm import joinedload
@@ -31,6 +31,7 @@
 from airflow.api_fastapi.common.types import Mimetype
 from airflow.api_fastapi.core_api.datamodels.log import TaskInstancesLogResponse
 from airflow.api_fastapi.core_api.openapi.exceptions import create_openapi_http_exception_doc
+from airflow.api_fastapi.core_api.security import DagAccessEntity, requires_access_dag
 from airflow.exceptions import TaskNotFound
 from airflow.models import TaskInstance, Trigger
 from airflow.models.taskinstancehistory import TaskInstanceHistory
@@ -63,6 +64,7 @@
             "content": text_example_response_for_get_log,
         },
     },
+    dependencies=[Depends(requires_access_dag("GET", DagAccessEntity.TASK_LOGS))],
     response_model=TaskInstancesLogResponse,
     response_model_exclude_unset=True,
 )

tests/api_fastapi/core_api/routes/public/test_log.py

@@ -341,6 +341,20 @@ def test_bad_signature_raises(self):
         # assert response.status_code == 400
         assert response.json() == {"detail": "Bad Signature. Please use only the tokens provided by the API."}
 
+    def test_should_raises_401_unauthenticated(self, unauthenticated_test_client):
+        response = unauthenticated_test_client.get(
+            f"public/dags/{self.DAG_ID}/dagRuns/{self.RUN_ID}/taskInstances/{self.TASK_ID}/logs/1",
+            headers={"Accept": "application/json"},
+        )
+        assert response.status_code == 401
+
+    def test_should_raises_403_unauthorized(self, unauthorized_test_client):
+        response = unauthorized_test_client.get(
+            f"public/dags/{self.DAG_ID}/dagRuns/{self.RUN_ID}/taskInstances/{self.TASK_ID}/logs/1",
+            headers={"Accept": "application/json"},
+        )
+        assert response.status_code == 403
+
     def test_raises_404_for_invalid_dag_run_id(self):
         response = self.client.get(
             f"public/dags/{self.DAG_ID}/dagRuns/NO_DAG_RUN/"  # invalid run_id