jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Update token expiration settings

Browse source
This commit is contained in:
anovazzi1 2024-03-08 15:05:13 -03:00
commit 6b3ff2cd8c
2 changed files with 5 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/backend/langflow/api/v1/login.py
View file

@ -40,7 +40,7 @@ async def login_to_get_access_token(
httponly=auth_settings.REFRESH_HTTPONLY, httponly=auth_settings.REFRESH_HTTPONLY,
samesite=auth_settings.REFRESH_SAME_SITE, samesite=auth_settings.REFRESH_SAME_SITE,
secure=auth_settings.REFRESH_SECURE, secure=auth_settings.REFRESH_SECURE,
expires=auth_settings.EXPIRES_REFRESH, expires=auth_settings.REFRESH_TOKEN_EXPIRE_MINUTES*60,
) )
response.set_cookie( response.set_cookie(
"access_token_lf", "access_token_lf",
@ -48,7 +48,7 @@ async def login_to_get_access_token(
httponly=auth_settings.ACCESS_HTTPONLY, httponly=auth_settings.ACCESS_HTTPONLY,
samesite=auth_settings.ACCESS_SAME_SITE, samesite=auth_settings.ACCESS_SAME_SITE,
secure=auth_settings.ACCESS_SECURE, secure=auth_settings.ACCESS_SECURE,
expires=auth_settings.EXPIRES_ACCESS, expires=auth_settings.ACCESS_TOKEN_EXPIRE_MINUTES*60,
) )
return tokens return tokens
else: else:
@ -74,7 +74,7 @@ async def auto_login(
httponly=auth_settings.ACCESS_HTTPONLY, httponly=auth_settings.ACCESS_HTTPONLY,
samesite=auth_settings.ACCESS_SAME_SITE, samesite=auth_settings.ACCESS_SAME_SITE,
secure=auth_settings.ACCESS_SECURE, secure=auth_settings.ACCESS_SECURE,
expires=auth_settings.EXPIRES_ACCESS, expires=auth_settings.ACCESS_TOKEN_EXPIRE_MINUTES*60,
) )
return tokens return tokens
@ -101,7 +101,7 @@ async def refresh_token(request: Request, response: Response, settings_service=D
httponly=auth_settings.REFRESH_TOKEN_HTTPONLY, httponly=auth_settings.REFRESH_TOKEN_HTTPONLY,
samesite=auth_settings.REFRESH_SAME_SITE, samesite=auth_settings.REFRESH_SAME_SITE,
secure=auth_settings.REFRESH_SECURE, secure=auth_settings.REFRESH_SECURE,
expires=auth_settings.EXPIRES_REFRESH, expires=auth_settings.REFRESH_TOKEN_EXPIRE_MINUTES*60,
) )
response.set_cookie( response.set_cookie(
"access_token_lf", "access_token_lf",
@ -109,7 +109,7 @@ async def refresh_token(request: Request, response: Response, settings_service=D
httponly=auth_settings.ACCESS_HTTPONLY, httponly=auth_settings.ACCESS_HTTPONLY,
samesite=auth_settings.ACCESS_SAME_SITE, samesite=auth_settings.ACCESS_SAME_SITE,
secure=auth_settings.ACCESS_SECURE, secure=auth_settings.ACCESS_SECURE,
expires=auth_settings.EXPIRES_ACCESS, expires=auth_settings.ACCESS_TOKEN_EXPIRE_MINUTES*60,
) )
return tokens return tokens
else: else:

4
src/backend/langflow/services/settings/auth.py
View file

@ -38,10 +38,6 @@ class AuthSettings(BaseSettings):
SUPERUSER: str = DEFAULT_SUPERUSER SUPERUSER: str = DEFAULT_SUPERUSER
SUPERUSER_PASSWORD: str = DEFAULT_SUPERUSER_PASSWORD SUPERUSER_PASSWORD: str = DEFAULT_SUPERUSER_PASSWORD
EXPIRES_ACCESS:datetime = 60*60
"""The expiration time of the access token cookie."""
EXPIRES_REFRESH:datetime = 60*60*12
"""The expiration time of the refresh token cookie."""
REFRESH_SAME_SITE: str = "none" REFRESH_SAME_SITE: str = "none"
"""The SameSite attribute of the refresh token cookie.""" """The SameSite attribute of the refresh token cookie."""
REFRESH_SECURE: bool = True REFRESH_SECURE: bool = True