Airflow login password encryption

[wangrenz]

Hi:

I add user and passwd by airflow create_user for sign in.

But, The result of software capture is plain text.

How to encrypt the password transmission? No https, Thanks.

Sincerely
Renzhi

[XD-DENG]

@wangrenz may you please provide more details? Because the issue doesn't make sense to me (or maybe I misunderstood something).

In the latest 1.10.*, if you are using db for user management, the invoking chain is airflow create_user -> appbuilder.sm.add_user() -> airflow.www_rbac.security. AirflowSecurityManager -> flask_appbuilder.security.sqla.manager. SecurityManager -> then use werkzeug.security.generate_password_hash to hash the password. I don't think the password will be stored in DB as plain text.

May you clarify what you meant by "the result of software capture"?

[XD-DENG]

I cross-checked with Issue list, and seems @kaxil has already answered this question there and has marked it closed, #12662.

Will mark this discussion as answered as well.