jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

fix: Prevent Authorization header on external URLs (#9061)

Browse source 
🐛 (api.tsx): fix issue where Authorization header was not being set correctly for internal requests
💡 (api.tsx): improve logic to set Authorization header only for internal requests and add custom headers for all requests
This commit is contained in:
Cristhian Zanforlin Lousa 2025-07-15 20:09:48 -03:00 • committed by GitHub
commit 9b3356e1c7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/frontend/src/controllers/API/api.tsx
View file

@ -49,11 +49,11 @@ function ApiInterceptor() {
request: (url, config) => { request: (url, config) => {
const accessToken = customGetAccessToken(); const accessToken = customGetAccessToken();
if (accessToken && !isAuthorizedURL(config?.url)) {
config.headers["Authorization"] = `Bearer ${accessToken}`;
}
if (!isExternalURL(url)) { if (!isExternalURL(url)) {
if (accessToken && !isAuthorizedURL(config?.url)) {
config.headers["Authorization"] = `Bearer ${accessToken}`;
}
for (const [key, value] of Object.entries(customHeaders)) { for (const [key, value] of Object.entries(customHeaders)) {
config.headers[key] = value; config.headers[key] = value;
} }