From 91fcf33506ca227a80d1a305e7a9699ce37f7bc5 Mon Sep 17 00:00:00 2001
From: gustavoschaedler <gustavopoa@gmail.com>
Date: Tue, 15 Aug 2023 23:47:50 +0100
Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20fix(auth.py):=20import=20get=5Fs?=
 =?UTF-8?q?ession=20from=20correct=20module=20to=20fix=20import=20error=20?=
 =?UTF-8?q?=E2=9C=A8=20feat(auth.py):=20add=20support=20for=20creating=20u?=
 =?UTF-8?q?ser=20API=20key=20and=20getting=20user=20ID=20from=20token=20?=
 =?UTF-8?q?=F0=9F=90=9B=20fix(base.py):=20fix=20typo=20in=20API=5FKEY=5FSE?=
 =?UTF-8?q?CRET=5FKEY=20variable=20name=20=F0=9F=90=9B=20fix(base.py):=20f?=
 =?UTF-8?q?ix=20typo=20in=20FIRST=5FSUPERUSER=20and=20FIRST=5FSUPERUSER=5F?=
 =?UTF-8?q?PASSWORD=20variable=20names=20=F0=9F=90=9B=20fix(base.py):=20fi?=
 =?UTF-8?q?x=20indentation=20in=20load=5Fsettings=5Ffrom=5Fyaml=20function?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/backend/langflow/auth/auth.py             | 20 +++++++++++++++++--
 .../langflow/services/settings/base.py        | 10 ++++++++--
 2 files changed, 26 insertions(+), 4 deletions(-)

diff --git a/src/backend/langflow/auth/auth.py b/src/backend/langflow/auth/auth.py
index 28d242342..9d4f12862 100644
--- a/src/backend/langflow/auth/auth.py
+++ b/src/backend/langflow/auth/auth.py
@@ -7,9 +7,8 @@ from fastapi.security import OAuth2PasswordBearer
 from fastapi import Depends, HTTPException, status
 from datetime import datetime, timedelta, timezone
 
-from langflow.services.utils import get_settings_manager
+from langflow.services.utils import get_settings_manager, get_session
 
-from langflow.services.utils import get_session
 from langflow.database.models.user import (
     User,
     get_user_by_id,
@@ -125,6 +124,23 @@ def create_user_longterm_token(db: Session = Depends(get_session)) -> dict:
     }
 
 
+def create_user_api_key(user_id: UUID) -> dict:
+    access_token = create_token(
+        data={"sub": str(user_id), "role": "api_key"},
+        expires_delta=timedelta(days=365 * 2),
+    )
+
+    return {"api_key": access_token}
+
+
+def get_user_id_from_token(token: str) -> UUID:
+    try:
+        user_id = jwt.get_unverified_claims(token)["sub"]
+        return UUID(user_id)
+    except (KeyError, JWTError, ValueError):
+        return UUID(int=0)
+
+
 def create_user_tokens(
     user_id: UUID, db: Session = Depends(get_session), update_last_login: bool = False
 ) -> dict:
diff --git a/src/backend/langflow/services/settings/base.py b/src/backend/langflow/services/settings/base.py
index f1b012f4d..ec976bade 100644
--- a/src/backend/langflow/services/settings/base.py
+++ b/src/backend/langflow/services/settings/base.py
@@ -42,11 +42,17 @@ class Settings(BaseSettings):
     ACCESS_TOKEN_EXPIRE_MINUTES: int = 60
     REFRESH_TOKEN_EXPIRE_MINUTES: int = 70
 
+    # API Key to execute /process endpoint
+    API_KEY_SECRET_KEY: Optional[
+        str
+    ] = "b82818e0ad4ff76615c5721ee21004b07d84cd9b87ba4d9cb42374da134b841a"
+    API_KEY_ALGORITHM: str = "HS256"
+
     # If AUTO_LOGIN = True
     # > The application does not request login and logs in automatically as a super user.
     AUTO_LOGIN: bool = True
-    FIRST_SUPERUSER: str = "superuser"
-    FIRST_SUPERUSER_PASSWORD: str = "12345"
+    FIRST_SUPERUSER: str = "langflow"
+    FIRST_SUPERUSER_PASSWORD: str = "langflow"
 
     @validator("DATABASE_URL", pre=True)
     def set_database_url(cls, value):