🐛 fix(endpoints.py): add check for missing api_key and raise HTTPException with status code 401 and detail message "Invalid API Key"

🐛 fix(crud.py): remove unnecessary return statement and update_total_uses function call if api_key_object is None

src/backend/langflow/api/v1/endpoints.py

@@ -100,6 +100,11 @@ async def process_flow(
     """
 
     try:
+        if api_key is None:
+            raise HTTPException(
+                status_code=status.HTTP_401_UNAUTHORIZED,
+                detail="Invalid API Key",
+            )
         api_key_user = api_key.user
         # Get the flow that matches the flow_id and belongs to the user
         flow = (

src/backend/langflow/services/database/models/api_key/crud.py

@@ -50,9 +50,7 @@ def check_key(session: Session, api_key: str) -> Optional[ApiKey]:
     """Check if the API key is valid."""
     query = select(ApiKey).where(ApiKey.api_key == api_key)
     api_key_object: Optional[ApiKey] = session.exec(query).first()
-    if api_key_object is None:
+    if api_key_object is not None:
-        return api_key_object
-
         threading.Thread(
             target=update_total_uses,
             args=(
@@ -60,7 +58,7 @@ def check_key(session: Session, api_key: str) -> Optional[ApiKey]:
                 api_key_object,
             ),
         ).start()
-    return api_key_object.user
+    return api_key_object
 
 
 def update_total_uses(session, api_key: ApiKey):