apache-airflow-providers-keycloak
Changelog¶
0.8.1¶
Release Date: 2026-06-26
Note
The get_cli_user method added to the Keycloak auth manager in 0.8.0 has been
removed together with the revert of the airflowctl CLI client integration in Airflow
core. If you relied on airflowctl CLI authentication via the Keycloak service
account, provide an API token via the AIRFLOW_CLI_TOKEN environment variable
instead.
Bug Fixes¶
Handle missing Keycloak resources as access denied (#68951)
Misc¶
Revert airflowctl dependency from airflow-core (#68856)
0.8.0¶
Release Date: 2026-06-22
Features¶
Implement 'get_cli_user' in the Keycloak auth manager so airflowctl CLI commands can authenticate via a service account (#68175)
0.7.3¶
Release Date: 2026-06-07
Misc¶
Replace Sphinx Redoc with Swagger API Docs (#67390)Add prek hook to enforce HTTPException is imported from fastapi (#67367)
0.7.2¶
Release Date: 2026-05-23
Bug Fixes¶
Attach default role policies (#67031)
Doc-only¶
Update Keycloak documentation to mention '[api] base_url' (#66023)
0.7.1¶
Release Date: 2026-04-12
Misc¶
Compat sdk conf follow-up for multiple providers (#64161)
0.7.0¶
Release Date: 2026-03-28
Features¶
Add TTL cache with single-flight dedup to Keycloak filter_authorized_dag_ids (#63184)
Bug Fixes¶
Adds a state param into keycloak login (#64114)
Misc¶
Add Python 3.14 Support (#63520)
0.6.0¶
Release Date: 2026-03-13
Features¶
Add method to retrieve teams from Keycloak as resources (#62715)
Bug Fixes¶
Check 'id_token' format before redirecting in Keycloak auth manager (#62813)Do not get 'logout_callback_url' from request in keycloak auth manager (#62795)Scope session token in cookie to base_url (#62771)
0.5.3¶
Release Date: 2026-03-02
Features¶
Keycloak CLI: provision multi‑team resources for auth manager (AIP‑67) (#61256)Keycloak auth manager: enforce team‑scoped authorization (AIP‑67) (#61351)
Bug Fixes¶
Fix HTTP 500 on /ui/teams endpoint when using Keycloak auth manager (#62471)Encode id_token to avoid special characters in it. (#62429)
0.5.2¶
Release Date: 2026-02-14
Bug Fixes¶
Amend DAG-level RBAC by using claim_token per UMA spec (#61283)Fix double-slash URL generation in Keycloak (#61121) (#61305)
Misc¶
Deprecate 'is_authorized_backfill' in Keycloak auth manager (#61402)Upgrade fastapi and conform openapi schema changes (#61476)Amend new Python Keycloak dependency changes (#61174)
0.5.1¶
Release Date: 2026-02-02
Bug Fixes¶
Logout the user when the refresh token is no longer valid (#60781)Fix logout flow in Keycloak auth manager (#60649)
Misc¶
Delete refresh token API in Keycloak auth manager (#60838)
0.5.0¶
Release Date: 2026-01-17
Features¶
Keycloak: implement client_credentials grant flow (#59411)
Misc¶
Literal to str Enum for ResourceMethod & ExtendedResourceMethod (#60244)Change starlette import to fastapi (#60382)New year means updated Copyright notices (#60344)Introduce a "cli" section in provider metadata (#59805)Update conf imports for keycloak provider (#60092)
0.4.1¶
Release Date: 2026-01-02
Bug Fixes¶
Fix logout route in Keycloak provider so a KeycloakostError doesn't lead to Internal Server Error in API server (#59382)Fix Internal Server Error in API server due to KeycloakPostError when refreshing user in Keycloak provider (#59361)Return 403 when the Keycloak access token is expired (#59281)
0.4.0¶
Release Date: 2025-12-13
Features¶
Keycloak CLI: add dry run functionality (#59134)keycloak: enable client_secret retrieval from secrets backend (#59065)Passwords from stdin in Keycloak Provider (#59119)Keycloak: implement connection pooling (#59252)
Misc¶
Add backcompat for exceptions in providers (#58727)Bump minimum prek version to 0.2.0 (#58952)
Doc-only¶
Add Keycloak login settings management documentation (#58605)update keycloak command references in permissions documentation (#58590)Updates to release process of providers (#58316)
0.3.0¶
Release Date: 2025-11-17
Features¶
Add 'LIST' permission to admin role in Keycloak auth manager (#57978)
Bug Fixes¶
Fix logout in Fab and Keycloak auth managers (#57992)
Misc¶
Convert all airflow distributions to be compliant with ASF requirements (#58138)
Doc-only¶
[Doc] Fixing some typos and spelling errors (#57225)
0.2.0¶
Release Date: 2025-10-26
Features¶
Integrate KeycloakAuthManager with airflowctl (#55969)
Bug Fixes¶
Update refresh token flow (#55506)Update authentication to handle JWT token in backend (#56633)
Doc-only¶
Remove placeholder Release Date in changelog and index files (#56056)
0.1.0¶
Release Date: 2025-09-09
Features¶
Add 'LIST' scope in Keycloak auth manager (#54998)
Doc-only¶
docs(keycloak): Update documentation for Keycloak auth manager CLI usage and permission management (#54928)
0.0.1¶
Release Date: 2025-08-17
Note
Provider is still WIP. It can be used with production but we may introduce breaking changes without following semver until version 1.0.0
Initial version of the provider (#46694)