Airflow 404 Flask cannot find /security/login API

[potiuk]

Discussed in #51550

^{Originally posted by HuanjieGuo June 9, 2025}

Apache Airflow version

Other Airflow 2 version (please specify below)

If "Other Airflow 2 version" selected, which one?

2.10.5

What happened?

We are using airflow 2.8.4, and recently we upgrade it to 2.10.5

Environment for Airflow 2.8.4

• Python version: 3.10
• Flask version:

Flask-AppBuilder==4.3.11
Flask-Babel==2.0.0
Flask-Bcrypt==1.0.1
Flask-Caching==2.1.0
Flask-JWT-Extended==4.6.0
Flask-Limiter==3.5.1
Flask-Login==0.6.3
Flask-SQLAlchemy==2.5.1
Flask-Session==0.5.0
Flask-WTF==1.2.1
Flask==2.2.5

Call /security/login API:

Environment for Airflow 2.10.5

• Python version: 3.10
• Flask version:

Flask-AppBuilder==4.5.2
Flask-Babel==2.0.0
Flask-Bcrypt==1.0.1
Flask-Caching==2.3.0
Flask-JWT-Extended==4.7.1
Flask-Limiter==3.10.1
Flask-Login==0.6.3
Flask-SQLAlchemy==2.5.1
Flask-Session==0.5.0
Flask-WTF==1.2.2
Flask==2.2.5

Call /security/login API:

Error Log:

{
  "detail": "The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.",
  "status": 404,
  "title": "Not Found",
  "type": "about:blank"
}

/security/login API in Flask-AppBuilder==4.5.2

https://github.com/dpgaspar/Flask-AppBuilder/blob/v4.5.2/flask_appbuilder/security/api.py#L32

/security/login API in Flask-AppBuilder==4.3.11

https://github.com/dpgaspar/Flask-AppBuilder/blob/v4.3.11/flask_appbuilder/security/api.py#L32

What you think should happen instead?

We should be able to call the /security/login API in 2.10.5

How to reproduce

call this /security/login in airflow 2.10.5 env

Operating System

ubuntu 22.04

Versions of Apache Airflow Providers

No response

Deployment

Official Apache Airflow Helm Chart

Deployment details

No response

Anything else?

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[potiuk]

@HuanjieGuo - by mistake I converted the original issue into discussion -> recreated it here. #51544. -> I am not sure what is the issue though.

[HuanjieGuo]

Thanks @potiuk , This looks like a Flask original API, and it doesn't work after we upgrade airflow to 2.10.5.

It is tricky because I check the API in Flask AppBuilder, it is still there. However, we cannot call it.

https://github.com/dpgaspar/Flask-AppBuilder/blob/v4.5.2/flask_appbuilder/security/api.py#L32

[potiuk]

cc: @vincbeck -> maybe that rings a bell ?

[vincbeck]

I could not find out where and when this API has been removed. I actually could not find how this API was used in 2.8.4. Nevertheless, this API has been removed at some point. I created #51578 to add it back. The bad news is, this will be only available in last version of FAB provider which is only compatible with Airflow 3.

[HuanjieGuo]

@vincbeck thanks, let me try to back-port the change into our own FAB provider branch

[vincbeck]

Please let me know :)