Fix 500 Internal Server Error when JWT user does not exist in FabAuth… by MonsterChenzhuo · Pull Request #61517 · apache/airflow

MonsterChenzhuo · 2026-02-06T07:47:32Z

Description

When using FabAuthManager, if a request contains a valid JWT token but the user ID inside the token (sub claim) does not exist in the database (e.g., the user was deleted), deserialize_user executes self.session.scalars(...).one(), which raises a sqlalchemy.exc.NoResultFound exception.

Currently, this exception is unhandled, causing the API to crash with a 500 Internal Server Error.

Error log:

Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]: INFO:     xxxxxxx:44100 - "GET /auth/login/?next= HTTP/1.1" 500 Internal Server Error
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]: ERROR:    Exception in ASGI application
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   + Exception Group Traceback (most recent call last):
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/uvicorn/protocols/http/httptools_impl.py", line 416, in run_asgi
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     result = await app(  # type: ignore[func-returns-value]
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/fastapi/applications.py", line 1082, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await super().__call__(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/applications.py", line 113, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.middleware_stack(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/errors.py", line 186, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     raise exc
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/errors.py", line 164, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.app(scope, receive, _send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/gzip.py", line 29, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await responder(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/gzip.py", line 130, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await super().__call__(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/gzip.py", line 46, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.app(scope, receive, self.send_with_compression)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/cors.py", line 85, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.app(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/base.py", line 189, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     raise app_exc
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/base.py", line 144, in coro
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.app(scope, receive_or_disconnect, send_no_error)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/exceptions.py", line 63, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await wrap_app_handling_exceptions(self.app, conn)(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/_exception_handler.py", line 53, in wrapped_app
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     raise exc
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/_exception_handler.py", line 42, in wrapped_app
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await app(scope, receive, sender)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/routing.py", line 716, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.middleware_stack(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/routing.py", line 736, in app
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await route.handle(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/routing.py", line 462, in handle
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.app(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/fastapi/applications.py", line 1082, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await super().__call__(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/applications.py", line 113, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     await self.middleware_stack(scope, receive, send)
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |   File "/data/airflow3env/lib/python3.12/site-packages/starlette/middleware/errors.py", line 186, in __call__
Feb 06 06:56:16 rpd-lhr-bd-prod-airflow-001 bash[103976]:   |     raise exc
Feb 06 06:56:16

Was generative AI tooling used to co-author this PR?

Yes (please specify the tool below)

Read the Pull Request Guidelines for more information. Note: commit author/co-author name and email in commits become permanently public when merged.
For fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
When adding dependency, check compliance with the ASF 3rd Party License Policy.
For significant user-facing changes create newsfragment: {pr_number}.significant.rst or {issue_number}.significant.rst, in airflow-core/newsfragments.

…Manager

shahar1

LGTM! I added unit tests to avoid possible regressions in the future (used GitHub Copilot for generating).
Please note to add unit tests in your next PRs (I assisted this time as I want to include this PR in the upcoming release that I cut very soon)

apache#61517) Co-authored-by: zhuoyuchen <> Co-authored-by: Shahar Epstein <60007259+shahar1@users.noreply.github.com>

Fix 500 Internal Server Error when JWT user does not exist in FabAuth…

a6e7553

…Manager

MonsterChenzhuo requested a review from vincbeck as a code owner February 6, 2026 07:47

boring-cyborg Bot added area:providers provider:fab labels Feb 6, 2026

MonsterChenzhuo added 2 commits February 9, 2026 14:15

Merge branch 'main' into fix500

ef82b7f

Merge branch 'main' into fix500

db034b6

uranusjr approved these changes Feb 10, 2026

View reviewed changes

Add unit tests

2bf5a12

shahar1 approved these changes Feb 10, 2026

View reviewed changes

shahar1 added 2 commits February 10, 2026 17:49

Merge branch 'main' into fix500

0144c32

Merge branch 'main' into fix500

76f18d0

uranusjr merged commit e5ef1d0 into apache:main Feb 10, 2026
86 checks passed

jscheffl mentioned this pull request Feb 10, 2026

Providers wave 2026-02-10 #61746

Merged

1 task

shahar1 mentioned this pull request Feb 11, 2026

Status of testing Providers that were prepared on February 10, 2026 #61766

Closed

81 tasks

radhwene pushed a commit to radhwene/airflow that referenced this pull request Mar 21, 2026

Fix 500 Internal Server Error when JWT user does not exist in FabAuth… (

3d4b498

apache#61517) Co-authored-by: zhuoyuchen <> Co-authored-by: Shahar Epstein <60007259+shahar1@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix 500 Internal Server Error when JWT user does not exist in FabAuth…#61517

Fix 500 Internal Server Error when JWT user does not exist in FabAuth…#61517
uranusjr merged 6 commits into
apache:mainfrom
MonsterChenzhuo:fix500

MonsterChenzhuo commented Feb 6, 2026 •

edited

Loading

Uh oh!

shahar1 left a comment •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

MonsterChenzhuo commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Was generative AI tooling used to co-author this PR?

Uh oh!

shahar1 left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

MonsterChenzhuo commented Feb 6, 2026 •

edited

Loading

shahar1 left a comment •

edited

Loading