Skip to content

Commit 0aaa5df

Browse files
committed
Fix default setting for hash algorithm for FAB password hash
The dpgaspar/Flask-AppBuilder#2332 introduced new configuration parameter, where it defaulted hash algorithm for passwords to "scrypt". However with our (old) version of Werkzeug, scrypt is not supported and default should be set to "pbkdf2:sha256" Fixes: 51854
1 parent 6b66380 commit 0aaa5df

File tree

1 file changed

+2
-0
lines changed
  • providers/fab/src/airflow/providers/fab/auth_manager/security_manager

1 file changed

+2
-0
lines changed

providers/fab/src/airflow/providers/fab/auth_manager/security_manager/override.py

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -784,12 +784,14 @@ def _init_config(self):
784784

785785
parsed_werkzeug_version = Version(werkzeug_version)
786786
if parsed_werkzeug_version < Version("3.0.0"):
787+
app.config.setdefault("FAB_PASSWORD_HASH_METHOD", "pbkdf2:sha256")
787788
app.config.setdefault(
788789
"AUTH_DB_FAKE_PASSWORD_HASH_CHECK",
789790
"pbkdf2:sha256:150000$Z3t6fmj2$22da622d94a1f8118"
790791
"c0976a03d2f18f680bfff877c9a965db9eedc51bc0be87c",
791792
)
792793
else:
794+
app.config.setdefault("FAB_PASSWORD_HASH_METHOD", "scrypt")
793795
app.config.setdefault(
794796
"AUTH_DB_FAKE_PASSWORD_HASH_CHECK",
795797
"scrypt:32768:8:1$wiDa0ruWlIPhp9LM$6e409d093e62ad54df2af895d0e125b05ff6cf6414"

0 commit comments

Comments
 (0)