airflow.providers.keycloak.auth_manager.datamodels.token¶

Attributes¶

TokenUnion

Classes¶

`TokenResponse`	Token serializer for responses.
`TokenPasswordBody`	Password grant token serializer for post bodies.
`TokenClientCredentialsBody`	Client credentials grant token serializer for post bodies.
`TokenJwtFederatedBody`	JWT-bearer grant token serializer for post bodies.
`TokenBody`	Token request body.

Module Contents¶

class airflow.providers.keycloak.auth_manager.datamodels.token.TokenResponse(/, **data)[source]¶

Bases: airflow.api_fastapi.core_api.base.BaseModel

Token serializer for responses.

access_token: str[source]¶

class airflow.providers.keycloak.auth_manager.datamodels.token.TokenPasswordBody(/, **data)[source]¶

Bases: airflow.api_fastapi.core_api.base.StrictBaseModel

Password grant token serializer for post bodies.

grant_type: Literal['password'] = 'password'[source]¶

username: str = None[source]¶

password: str = None[source]¶

create_token(expiration_time_in_seconds)[source]¶

Create token using password grant.

class airflow.providers.keycloak.auth_manager.datamodels.token.TokenClientCredentialsBody(/, **data)[source]¶

Bases: airflow.api_fastapi.core_api.base.StrictBaseModel

Client credentials grant token serializer for post bodies.

grant_type: Literal['client_credentials'][source]¶

client_id: str = None[source]¶

client_secret: str = None[source]¶

create_token(expiration_time_in_seconds)[source]¶

Create token using client credentials grant.

class airflow.providers.keycloak.auth_manager.datamodels.token.TokenJwtFederatedBody(/, **data)[source]¶

Bases: airflow.api_fastapi.core_api.base.StrictBaseModel

JWT-bearer grant token serializer for post bodies.

Accepts a Keycloak access token obtained via any Keycloak-native authentication method (e.g. a client federated to an external OIDC identity provider) instead of Airflow re-authenticating to Keycloak itself.

grant_type: Literal['urn:ietf:params:oauth:grant-type:jwt-bearer'][source]¶

assertion: str = None[source]¶

create_token(expiration_time_in_seconds)[source]¶

Create token by validating a pre-obtained Keycloak assertion.

airflow.providers.keycloak.auth_manager.datamodels.token.TokenUnion[source]¶

class airflow.providers.keycloak.auth_manager.datamodels.token.TokenBody[source]¶

Bases: pydantic.RootModel[TokenUnion]

Token request body.

classmethod default_grant_type(data)[source]¶: Add default grant_type for discrimination.