[anishmehta24]

Issue number: closes #8714

Summary

Changes

TransferFamilyAuthorizer.password is typed str | None and documented as None for non-password logins, but indexed the event directly, so an event without password raised KeyError. It now returns self.get("password"), matching the Pydantic model, which already defaults password to None. The docstring now says it's None when the event has no password (e.g. SSH key login) rather than mentioning certificates.

Added test_transfer_family_authorizer_event_without_password in tests/unit/data_classes/required_dependencies/test_transfer_family_event.py; it fails on develop with KeyError: 'password'.

User experience

Before: TransferFamilyAuthorizer(event).password raises KeyError when the event has no password. After: it returns None.

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[leandrodamascena]

Thanks @anishmehta24, confirmed. Transfer Family only sends password for password logins, the AWS sample identity provider itself checks for the missing key, and our Pydantic model already defaults it to None, so the data class was the odd one out.

I'm approving now. This goes out in 3.40.0, so it will sit here for a while before I merge it. No rebase needed in the meantime, and you'll be credited in the release notes.