AIP-84 | Add Auth for Config

[jason810496]

related: #42360

---

^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in newsfragments.

[pierrejeambrun]

Nice, one nit that should be good to figure out. Basically the permission decorator should not change the openapi spec. (beside the auth scheme)

[pierrejeambrun]

Nice, need rebase.

[pierrejeambrun]

Need rebase to solve conflicts.

[pierrejeambrun]

The CI error persists. That's weird

[potiuk]

it's not the config that is problematic now:

Triggering a DAG run
Exception when calling DAGRunAPI->post_dag_run: (422)
Reason: Unprocessable Entity
HTTP response headers: HTTPHeaderDict({'date': 'Tue, 04 Mar 2025 14:38:27 GMT', 
'server': 'uvicorn', 'content-length': '156', 'content-type': 
'application/json', 'vary': 'Accept-Encoding'})
HTTP response body: 
{"detail":[{"type":"missing","loc":["body","logical_date"],"msg":"Field 
required","input":{"dag_run_id":"some_test_run_8a505b32352c44499cf6560a1d1a9665"
}}]}


Exception when calling DAGRunAPI->post_dag_run: (401)
Reason: Unauthorized
HTTP response headers: HTTPHeaderDict({'date': 'Tue, 04 Mar 2025 14:38:27 GMT', 
'server': 'uvicorn', 'www-authenticate': 'Bearer', 'content-length': '30', 
'content-type': 'application/json', 'vary': 'Accept-Encoding'})
HTTP response body: {"detail":"Not authenticated"}

[jason810496]

it's not the config that is problematic now:

Thanks to point it out, let me take a look at python client test and fix it.

[pierrejeambrun]

I have a fix for Tests / CI image checks / Test Python API client (pull_request) basically that is not specifically related to this PR. The test is just broken at the moment. (passing on main but not testing anything)

[pierrejeambrun]

#47460

[Lee-W]

As this has been approved and full test passed, I'm merging this one