Paddle payment 4 (#435)

* Refactor PricingPage component with new layout and plan selection functionality

* Add create subscription functionality and update PricingPage integration

* Implement Paddle pricing retrieval and integrate with PricingPage

* feat-frontend: integrate Paddle Billing checkout with prefilled Clerk email

* update:ebs-common-stage-prod.yml to load vite_paddle envs from secrets

* update package-lock.json

* chore: configure Paddle env injection during Docker build and CI workflow

* chore:add temporary go to flows button in pricing UI

* update auth gaurd

* update auth gaurd

* update auth gaurd

* update pricing page

* fix: persist isOrgSelected flag across routes

* fix:persist isOrgselected flag across routes

* fix: update token fetching logic to skip cache and include organization ID

* fix: sync org-scoped token on user sign-in and organization selection

* fix: resolve Ruff lint issues and optimize API calls with caching

* fix: update plan configuration loading and add new pricing plans

Author: Bharani0012

.github/workflows/ebs-common-stage-prod.yml

@@ -122,7 +122,10 @@ jobs:
             PADDLE_ENVIRONMENT="prod"
           fi
 
-          if [ -z "$PADDLE_API_KEY" ] || [ -z "$PADDLE_CLIENT_KEY" ]; then
+          VITE_PADDLE_CLIENT_KEY="$PADDLE_CLIENT_KEY"
+          VITE_PADDLE_ENVIRONMENT="$PADDLE_ENVIRONMENT"
+
+          if [ -z "$PADDLE_API_KEY" ] || [ -z "$PADDLE_CLIENT_KEY" ] || [ -z "$PADDLE_ENVIRONMENT" ]; then
             echo "❌ Missing Paddle secrets for ${ENVIRONMENT} environment"
             exit 1
           fi
@@ -147,6 +150,18 @@ jobs:
             echo "PADDLE_ENVIRONMENT=${PADDLE_ENVIRONMENT}" >> "$ENV_FILE"
           fi
 
+          if grep -q '^VITE_PADDLE_CLIENT_KEY=' "$ENV_FILE"; then
+            sed -i "s|^VITE_PADDLE_CLIENT_KEY=.*|VITE_PADDLE_CLIENT_KEY=${VITE_PADDLE_CLIENT_KEY}|" "$ENV_FILE"
+          else
+            echo "VITE_PADDLE_CLIENT_KEY=${VITE_PADDLE_CLIENT_KEY}" >> "$ENV_FILE"
+          fi
+
+          if grep -q '^VITE_PADDLE_ENVIRONMENT=' "$ENV_FILE"; then
+            sed -i "s|^VITE_PADDLE_ENVIRONMENT=.*|VITE_PADDLE_ENVIRONMENT=${PADDLE_ENVIRONMENT}|" "$ENV_FILE"
+          else
+            echo "VITE_PADDLE_ENVIRONMENT=${PADDLE_ENVIRONMENT}" >> "$ENV_FILE"
+          fi
+
       - name: Prepare Clerk API key
         env:
           ENVIRONMENT: ${{ github.event.inputs.environment }}
@@ -332,6 +347,8 @@ jobs:
           VITE_CLERK_AUTH_ENABLED=true \
           VITE_CLERK_PUBLISHABLE_KEY=${{ secrets.CLERK_PUBLISHABLE_KEY }} \
           VITE_CLERK_FRONTEND_API=${{ vars.STAGING_CLERK_FRONTEND_API }} \
+          VITE_PADDLE_CLIENT_KEY=${{ secrets.STAGING_PADDLE_CLIENT_KEY }} \
+          VITE_PADDLE_ENVIRONMENT=${{ github.event.inputs.environment }} \
           make docker_build TAG=langflow:staging-$BRANCH_NAME-$COMMIT_ID DOCKER=docker
 
           docker tag langflow:staging-$BRANCH_NAME-$COMMIT_ID forwardemailforaifirstdesk/langflow:staging-$BRANCH_NAME-$COMMIT_ID
@@ -350,6 +367,8 @@ jobs:
           VITE_CLERK_AUTH_ENABLED=true \
           VITE_CLERK_PUBLISHABLE_KEY=${{ secrets.PROD_CLERK_PUBLISHABLE_KEY }} \
           VITE_CLERK_FRONTEND_API=${{ vars.PROD_CLERK_FRONTEND_API }} \
+          VITE_PADDLE_CLIENT_KEY=${{ secrets.PROD_PADDLE_CLIENT_KEY }} \
+          VITE_PADDLE_ENVIRONMENT=${{ github.event.inputs.environment }} \
           make docker_build TAG=langflow:prod-$BRANCH_NAME-$COMMIT_ID DOCKER=docker
 
           docker tag langflow:prod-$BRANCH_NAME-$COMMIT_ID forwardemailforaifirstdesk/langflow:prod-$BRANCH_NAME-$COMMIT_ID

Makefile

@@ -10,6 +10,8 @@ DOCKER_COMPOSE=docker_example/docker-compose.yml
 
 VITE_CLERK_AUTH_ENABLED ?= false
 VITE_CLERK_PUBLISHABLE_KEY ?=
+VITE_PADDLE_CLIENT_KEY ?=
+VITE_PADDLE_ENVIRONMENT ?=
 PYTHON_REQUIRED=$(shell grep '^requires-python[[:space:]]*=' pyproject.toml | sed -n 's/.*"\([^"]*\)".*/\1/p')
 RED=\033[0;31m
 NC=\033[0m # No Color
@@ -342,6 +344,8 @@ dockerfile_build:
 		--build-arg VITE_CLERK_AUTH_ENABLED=${VITE_CLERK_AUTH_ENABLED} \
 		--build-arg VITE_CLERK_PUBLISHABLE_KEY=${VITE_CLERK_PUBLISHABLE_KEY} \
 		--build-arg VITE_AUTO_LOGIN=$(VITE_AUTO_LOGIN) \
+		--build-arg VITE_PADDLE_CLIENT_KEY=${VITE_PADDLE_CLIENT_KEY} \
+		--build-arg VITE_PADDLE_ENVIRONMENT=${VITE_PADDLE_ENVIRONMENT} \
 		-t $(TAG) .
 
 dockerfile_build_be: dockerfile_build

docker/build_and_push.Dockerfile

@@ -60,8 +60,12 @@ WORKDIR /tmp/src/frontend
 
 ARG VITE_CLERK_AUTH_ENABLED=false
 ARG VITE_CLERK_PUBLISHABLE_KEY=""
+ARG VITE_PADDLE_CLIENT_KEY=""
+ARG VITE_PADDLE_ENVIRONMENT=""
 ENV VITE_CLERK_AUTH_ENABLED=$VITE_CLERK_AUTH_ENABLED
 ENV VITE_CLERK_PUBLISHABLE_KEY=$VITE_CLERK_PUBLISHABLE_KEY
+ENV VITE_PADDLE_CLIENT_KEY=$VITE_PADDLE_CLIENT_KEY
+ENV VITE_PADDLE_ENVIRONMENT=$VITE_PADDLE_ENVIRONMENT
 
 RUN --mount=type=cache,target=/root/.npm \
     npm ci \

scripts/localsetup/local-docker-test.sh

@@ -98,17 +98,26 @@ show_verbose_help() {
 ⚙️  Prerequisites:
     1. Docker must be installed and running
     2. .env-file must exist in the project root
-    3. VITE_CLERK_PUBLISHABLE_KEY environment variable must be set
+    3. Clerk and Paddle frontend environment variables must be set
 
 🔑 Required Environment Variable:
     VITE_CLERK_PUBLISHABLE_KEY - Clerk publishable key (required for build)
+    VITE_CLERK_FRONTEND_API - Clerk frontend API host (required for build)
+    VITE_PADDLE_CLIENT_KEY - Paddle client-side token (required for build)
+    VITE_PADDLE_ENVIRONMENT - Paddle environment: staging or production (required for build)
     
     To set it, run:
     export VITE_CLERK_PUBLISHABLE_KEY="pk_test_your_key_here"
+    export VITE_CLERK_FRONTEND_API="clerk.yourapp.dev"
+    export VITE_PADDLE_CLIENT_KEY="test_XXXXXXXXXXXXXXXX"
+    export VITE_PADDLE_ENVIRONMENT="staging"
 
 💡 Examples:
     # Set the required environment variable
     export VITE_CLERK_PUBLISHABLE_KEY="pk_test_xxxxxxxxxxxx"
+    export VITE_CLERK_FRONTEND_API="clerk.localhost.dev"
+    export VITE_PADDLE_CLIENT_KEY="test_XXXXXXXXXXXXXXXX"
+    export VITE_PADDLE_ENVIRONMENT="staging"
     
     # Build the Docker image with default timestamp tag
     ./local-docker-test.sh build
@@ -199,8 +208,8 @@ display_multiline_command() {
     echo ""
 }
 
-# Check if VITE_CLERK_PUBLISHABLE_KEY is set
-check_clerk_envs() {
+# Check required frontend environment variables for Docker build
+check_required_frontend_envs() {
     local missing=false
 
     echo ""
@@ -254,11 +263,67 @@ check_clerk_envs() {
     fi
 }
 
+# Check Paddle variables together
+check_paddle_envs() {
+    local missing=false
+
+    echo ""
+    echo "🔍 Checking Paddle environment variables..."
+
+    if [ -z "${VITE_PADDLE_CLIENT_KEY:-}" ] && [ -z "${VITE_PADDLE_ENVIRONMENT:-}" ]; then
+        echo "❌ Both Paddle environment variables are missing!"
+        echo ""
+        echo "You must set both before continuing:"
+        echo "    export VITE_PADDLE_CLIENT_KEY=\"test_your_client_key_here\""
+        echo "    export VITE_PADDLE_ENVIRONMENT=\"staging\""
+        echo ""
+        echo "💡 Example:"
+        echo "    export VITE_PADDLE_CLIENT_KEY=\"test_12345ABCDE\""
+        echo "    export VITE_PADDLE_ENVIRONMENT=\"production\""
+        echo ""
+        missing=true
+
+    elif [ -z "${VITE_PADDLE_CLIENT_KEY:-}" ]; then
+        echo "❌ VITE_PADDLE_CLIENT_KEY is missing!"
+        echo "✅ VITE_PADDLE_ENVIRONMENT is set to: ${VITE_PADDLE_ENVIRONMENT}"
+        echo ""
+        echo "Set it using:"
+        echo "    export VITE_PADDLE_CLIENT_KEY=\"test_your_client_key_here\""
+        echo ""
+        missing=true
+
+    elif [ -z "${VITE_PADDLE_ENVIRONMENT:-}" ]; then
+        echo "❌ VITE_PADDLE_ENVIRONMENT is missing!"
+        echo "✅ VITE_PADDLE_CLIENT_KEY is set"
+        echo ""
+        echo "Set it using:"
+        echo "    export VITE_PADDLE_ENVIRONMENT=\"staging\""
+        echo ""
+        echo "💡 Valid values: staging, production"
+        echo ""
+        missing=true
+
+    else
+        echo "✅ Both Paddle environment variables are set"
+        echo "   - VITE_PADDLE_CLIENT_KEY: ${VITE_PADDLE_CLIENT_KEY}"
+        echo "   - VITE_PADDLE_ENVIRONMENT: ${VITE_PADDLE_ENVIRONMENT}"
+    fi
+
+    if [ "$missing" = true ]; then
+        echo ""
+        echo "❌ Please fix the missing Paddle variables above before continuing."
+        echo ""
+        exit 1
+    fi
+}
+
 # Configuration from GitHub workflow (staging environment)
 VITE_AUTO_LOGIN=false
 VITE_CLERK_AUTH_ENABLED=true
 VITE_CLERK_PUBLISHABLE_KEY="${VITE_CLERK_PUBLISHABLE_KEY:-}"
 VITE_CLERK_FRONTEND_API="${VITE_CLERK_FRONTEND_API:-}"
+VITE_PADDLE_CLIENT_KEY="${VITE_PADDLE_CLIENT_KEY:-}"
+VITE_PADDLE_ENVIRONMENT="${VITE_PADDLE_ENVIRONMENT:-}"
 
 # Docker image details
 IMAGE_NAME="langflow"
@@ -275,8 +340,9 @@ POSTGRES_PORT="5432"
 
 # Function to build Docker image
 build_docker() {
-    # Check Clerk environment variables together
-    check_clerk_envs
+    # Check required frontend environment variables
+    check_required_frontend_envs
+    check_paddle_envs
 
     # Ask for custom tag
     echo ""
@@ -314,6 +380,8 @@ build_docker() {
     VITE_CLERK_AUTH_ENABLED=${VITE_CLERK_AUTH_ENABLED} \
     VITE_CLERK_PUBLISHABLE_KEY=${VITE_CLERK_PUBLISHABLE_KEY} \
     VITE_CLERK_FRONTEND_API=${VITE_CLERK_FRONTEND_API} \
+    VITE_PADDLE_CLIENT_KEY=${VITE_PADDLE_CLIENT_KEY} \
+    VITE_PADDLE_ENVIRONMENT=${VITE_PADDLE_ENVIRONMENT} \
     make docker_build"
     display_command "$BUILD_CMD" "Building Docker image"
 
@@ -323,6 +391,8 @@ build_docker() {
     VITE_CLERK_AUTH_ENABLED=${VITE_CLERK_AUTH_ENABLED} \
     VITE_CLERK_PUBLISHABLE_KEY=${VITE_CLERK_PUBLISHABLE_KEY} \
     VITE_CLERK_FRONTEND_API=${VITE_CLERK_FRONTEND_API} \
+    VITE_PADDLE_CLIENT_KEY=${VITE_PADDLE_CLIENT_KEY} \
+    VITE_PADDLE_ENVIRONMENT=${VITE_PADDLE_ENVIRONMENT} \
     make docker_build
 
     echo ""

src/backend/base/langflow/api/v1/billing.py

@@ -1,7 +1,7 @@
 from fastapi import APIRouter, HTTPException
+from lfx.log.logger import logger
 from pydantic import BaseModel
 
-from lfx.log.logger import logger
 from langflow.api.utils import CurrentActiveUser
 from langflow.services.auth.clerk_utils import (
     get_clerk_user_id_from_payload,
@@ -10,6 +10,7 @@
     get_paddle_subscription_id_from_clerk_payload,
 )
 from langflow.services.deps import get_settings_service
+from langflow.services.paddle.provisioning import get_paddle_prices
 from langflow.services.paddle.subscriptions import (
     ensure_paddle_customer_for_user,
     has_active_subscription,
@@ -21,7 +22,6 @@
 class EnsurePaddleCustomerRequest(BaseModel):
     email: str | None = None
 
-
 @router.post("/ensure-paddle-customer")
 async def ensure_paddle_customer(
     current_user: CurrentActiveUser,
@@ -102,4 +102,15 @@ async def get_org_access(
         **subscription_access,
         "is_admin": is_admin,
         "reason": "subscription_inactive",
-    }
+    }
+
+@router.get("/paddle-prices")
+async def list_paddle_prices():
+    """Return a mapping of plan_key -> Paddle price_id."""
+    try:
+        return await get_paddle_prices()
+    except ValueError as exc:
+        raise HTTPException(status_code=404, detail=str(exc)) # noqa: B904
+    except Exception as exc: #noqa: BLE001
+        logger.exception(f"Error fetching Paddle prices {exc}")
+        raise HTTPException(status_code=500, detail="Internal server error") #noqa: B904

src/backend/base/langflow/services/auth/clerk_utils.py

@@ -1,8 +1,8 @@
 import uuid
-from datetime import datetime, timedelta, timezone
 from contextvars import ContextVar, Token
+from datetime import datetime, timedelta, timezone
 from typing import Any, Literal
-from uuid import UUID, NAMESPACE_URL, uuid5
+from uuid import NAMESPACE_URL, UUID, uuid5
 
 import httpx
 from fastapi import HTTPException, Request, status
@@ -12,20 +12,20 @@
 from starlette.status import HTTP_401_UNAUTHORIZED
 
 from langflow.logging.logger import logger
-from langflow.services.database.constants import DUMMY_USER_NAMESPACE_TEMPLATE
-from langflow.services.database.models.user import User
-from langflow.services.database.models.user.crud import get_user_by_id
-from langflow.services.deps import get_settings_service
 from langflow.services.auth.clerk_metadata_constants import (
-    CLERK_JWT_SUB_KEY,
     CLERK_JWT_EMAIL_KEY,
     CLERK_JWT_ORG_KEY,
+    CLERK_JWT_SUB_KEY,
     CLERK_JWT_UUID_KEY,
+    ORG_ID_KEY,
+    ORGANISATION_CREATED_BY_KEY,
     PADDLE_CUSTOMER_ID_KEY,
     PADDLE_SUBSCRIPTION_ID_KEY,
-    ORGANISATION_CREATED_BY_KEY,
-    ORG_ID_KEY,
 )
+from langflow.services.database.constants import DUMMY_USER_NAMESPACE_TEMPLATE
+from langflow.services.database.models.user import User
+from langflow.services.database.models.user.crud import get_user_by_id
+from langflow.services.deps import get_settings_service
 
 # Context variable to store decoded clerk claims per request
 auth_header_ctx: ContextVar[dict | None] = ContextVar("auth_header_ctx", default=None)
@@ -63,7 +63,8 @@ def _get_headers(self) -> dict:
         secret_key = settings_service.settings.clerk_api_key
         secret_key = secret_key.strip()
         if not secret_key:
-            raise RuntimeError("CLERK_API_KEY not configured")
+            msg = "CLERK_API_KEY not configured"
+            raise RuntimeError(msg)
         return {
             "Authorization": f"Bearer {secret_key}",
             "Content-Type": "application/json",
@@ -103,7 +104,7 @@ async def update_public_metadata(self, updates: dict) -> dict:
         merged = self.merge_metadata(existing, updates)
         await self.set_public_metadata(merged)
         return merged
-    
+
 
 async def update_clerk_organization(
     *,
@@ -112,7 +113,7 @@ async def update_clerk_organization(
     max_allowed_members: int | None = None,
 ) -> None:
     """Update a Clerk organization's public metadata and/or seat limit."""
-    logger.info(f"Updating Clerk organization {org_id}: public_metadata={public_metadata}, max_allowed_members={max_allowed_members}")
+    logger.info(f"Updating Clerk organization {org_id}: public_metadata={public_metadata}, max_allowed_members={max_allowed_members}") #noqa: E501
     manager = ClerkPublicMetadataManager.for_organization(org_id)
 
     if public_metadata is not None:
@@ -169,8 +170,7 @@ def get_email_from_clerk_payload() -> str:
 
 
 async def get_paddle_customer_id_from_clerk_payload() -> str | None:
-    """
-    Retrieve paddle_customer_id directly from Clerk JWT public metadata.
+    """Retrieve paddle_customer_id directly from Clerk JWT public metadata.
 
     Assumes the JWT template includes:
     {