jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Fix refresh http only variable (#1493)

Browse source 
* Fix refresh http only variable
This commit is contained in:
Gabriel Luiz Freitas Almeida 2024-03-04 08:43:46 -03:00 • committed by GitHub
commit 19afd6486d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/backend/langflow/api/v1/login.py
View file

@ -1,5 +1,7 @@
from fastapi import APIRouter, Depends, HTTPException, Request, Response, status from fastapi import APIRouter, Depends, HTTPException, Request, Response, status
from fastapi.security import OAuth2PasswordRequestForm from fastapi.security import OAuth2PasswordRequestForm
from sqlmodel import Session
from langflow.api.v1.schemas import Token from langflow.api.v1.schemas import Token
from langflow.services.auth.utils import ( from langflow.services.auth.utils import (
authenticate_user, authenticate_user,
@ -8,7 +10,6 @@ from langflow.services.auth.utils import (
create_user_tokens, create_user_tokens,
) )
from langflow.services.deps import get_session, get_settings_service from langflow.services.deps import get_session, get_settings_service
from sqlmodel import Session
router = APIRouter(tags=["Login"]) router = APIRouter(tags=["Login"])
@ -85,7 +86,9 @@ async def auto_login(
@router.post("/refresh") @router.post("/refresh")
async def refresh_token(request: Request, response: Response, settings_service=Depends(get_settings_service)): async def refresh_token(
request: Request, response: Response, settings_service=Depends(get_settings_service)
):
auth_settings = settings_service.auth_settings auth_settings = settings_service.auth_settings
token = request.cookies.get("refresh_token_lf") token = request.cookies.get("refresh_token_lf")
@ -95,7 +98,7 @@ async def refresh_token(request: Request, response: Response, settings_service=D
response.set_cookie( response.set_cookie(
"refresh_token_lf", "refresh_token_lf",
tokens["refresh_token"], tokens["refresh_token"],
httponly=auth_settings.REFRESH_TOKEN_HTTPONLY, httponly=auth_settings.REFRESH_HTTPONLY,
samesite=auth_settings.REFRESH_SAME_SITE, samesite=auth_settings.REFRESH_SAME_SITE,
secure=auth_settings.REFRESH_SECURE, secure=auth_settings.REFRESH_SECURE,
) )