From 1ad857ec38b37788982ba92b4b5f419861902047 Mon Sep 17 00:00:00 2001 From: hainenber Date: Thu, 13 Feb 2025 15:33:51 +0700 Subject: [PATCH] fix(cfg): disable verify sub claim in JWT to be string type in PyJWT >= 2.10 Signed-off-by: hainenber --- superset/config.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/superset/config.py b/superset/config.py index 6362e39aec7e7..ef3a98d476c2e 100644 --- a/superset/config.py +++ b/superset/config.py @@ -1915,6 +1915,12 @@ class ExtraDynamicQueryFilters(TypedDict, total=False): # connection via the UI (without downtime). CATALOGS_SIMPLIFIED_MIGRATION: bool = False +# Configure JWT subsystem to not enforce that the sub claim is a string +# Set this variable to avoid breaking `/api/security` endpoints +# TODO: remove this variable once pyjwt resolved the issue. +# https://github.com/jpadilla/pyjwt/issues/1017 +# https://github.com/dpgaspar/Flask-AppBuilder/issues/2287 +JWT_VERIFY_SUB = False # ------------------------------------------------------------------- # * WARNING: STOP EDITING HERE *