Airflow 404 Flask cannot find /security/login API

[HuanjieGuo]

Apache Airflow version

Other Airflow 2 version (please specify below)

If "Other Airflow 2 version" selected, which one?

2.10.5

What happened?

We are using airflow 2.8.4, and recently we upgrade it to 2.10.5

Environment for Airflow 2.8.4

• Python version: 3.10
• Flask version:

Flask-AppBuilder==4.3.11
Flask-Babel==2.0.0
Flask-Bcrypt==1.0.1
Flask-Caching==2.1.0
Flask-JWT-Extended==4.6.0
Flask-Limiter==3.5.1
Flask-Login==0.6.3
Flask-SQLAlchemy==2.5.1
Flask-Session==0.5.0
Flask-WTF==1.2.1
Flask==2.2.5

Call /security/login API:

Environment for Airflow 2.10.5

• Python version: 3.10
• Flask version:

Flask-AppBuilder==4.5.2
Flask-Babel==2.0.0
Flask-Bcrypt==1.0.1
Flask-Caching==2.3.0
Flask-JWT-Extended==4.7.1
Flask-Limiter==3.10.1
Flask-Login==0.6.3
Flask-SQLAlchemy==2.5.1
Flask-Session==0.5.0
Flask-WTF==1.2.2
Flask==2.2.5

Call /security/login API:

Error Log:

{
  "detail": "The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.",
  "status": 404,
  "title": "Not Found",
  "type": "about:blank"
}

/security/login API in Flask-AppBuilder==4.5.2

https://github.com/dpgaspar/Flask-AppBuilder/blob/v4.5.2/flask_appbuilder/security/api.py#L32

/security/login API in Flask-AppBuilder==4.3.11

https://github.com/dpgaspar/Flask-AppBuilder/blob/v4.3.11/flask_appbuilder/security/api.py#L32

What you think should happen instead?

We should be able to call the /security/login API in 2.10.5

How to reproduce

call this /security/login in airflow 2.10.5 env

Operating System

ubuntu 22.04

Versions of Apache Airflow Providers

No response

Deployment

Official Apache Airflow Helm Chart

Deployment details

No response

Anything else?

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[potiuk]

Please use: https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/token.html from FAB provider. FAB hase been moved to FAB provider and you should use FAB provider exposed API for that.

[potiuk]

Converted to discussion if more discussionis needed.

[potiuk]

Actually I am not sure that was a mistake - the auth-manager API works in Airlfow 3. I recreated the issue in #51551