jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

fix: fixes auth check for auto_login (#8796)

Browse source
This commit is contained in:
Jordan Frazier 2025-07-01 03:01:09 -07:00 • committed by Gabriel Luiz Freitas Almeida
commit fe58d69ae7
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/backend/base/langflow/services/auth/utils.py
View file

@ -59,6 +59,7 @@ async def api_key_security(
if settings_service.auth_settings.skip_auth_auto_login: if settings_service.auth_settings.skip_auth_auto_login:
result = await get_user_by_username(db, settings_service.auth_settings.SUPERUSER) result = await get_user_by_username(db, settings_service.auth_settings.SUPERUSER)
logger.warning(AUTO_LOGIN_WARNING) logger.warning(AUTO_LOGIN_WARNING)
return UserRead.model_validate(result, from_attributes=True)
else: else:
raise HTTPException( raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN, status_code=status.HTTP_403_FORBIDDEN,
@ -72,19 +73,18 @@ async def api_key_security(
detail="An API key must be passed as query or header", detail="An API key must be passed as query or header",
) )
elif query_param:
result = await check_key(db, query_param)
else: else:
result = await check_key(db, header_param) result = await check_key(db, query_param or header_param)
if not result: if not result:
raise HTTPException( raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN, status_code=status.HTTP_403_FORBIDDEN,
detail="Invalid or missing API key", detail="Invalid or missing API key",
) )
if isinstance(result, User): if isinstance(result, User):
return UserRead.model_validate(result, from_attributes=True) return UserRead.model_validate(result, from_attributes=True)
msg = "Invalid result type" msg = "Invalid result type"
raise ValueError(msg) raise ValueError(msg)