Testing Token (#25)

* login file added token

* added clerk function to receive a token

* token get from clerk in frontend

* remove clerk calling function in login.tsx file

* remove clerk function in auth.tsx file

* change bhalabhla passwoed to clerk dummy password

* updated clerk_token_middileware

* update login-page.tsx to center the login forms

* updated auth.tsx

---------

Co-authored-by: Bharani0012 <bharanitharan695@gmail.com>

Author: Kabilan-16

src/backend/base/langflow/services/auth/clerk_utils.py

@@ -5,8 +5,10 @@
 
 import httpx
 from fastapi import HTTPException, Request, status
+from fastapi.responses import JSONResponse
 from jose import JWTError, jwk, jwt
 from sqlmodel.ext.asyncio.session import AsyncSession
+from starlette.status import HTTP_401_UNAUTHORIZED
 
 from langflow.logging.logger import logger
 from langflow.services.database.models.user import User, UserCreate
@@ -19,7 +21,7 @@
 _jwks_cache: dict[str, dict[str, Any]] = {}
 
 # APIs that require Clerk token decoding in middleware
-PROTECTED_PATHS = ["/api/v1/users/"]
+PROTECTED_PATHS = ["/api/v1/users/","/api/v1/login"]
 
 
 async def _get_jwks(issuer: str) -> dict[str, Any]:
@@ -145,14 +147,27 @@ async def clerk_token_middleware(request: Request, call_next):
 
     ctx_token: Token | None = None
     if settings.auth_settings.CLERK_AUTH_ENABLED and request.url.path in PROTECTED_PATHS:
+        logger.info(f"Processing Clerk token for path: {request.url.path}")
         auth_header = request.headers.get("Authorization")
+
+        if not auth_header or not auth_header.startswith("Bearer "):
+            logger.warning("Missing or malformed Authorization header for Clerk protected route.")
+            return JSONResponse(
+                status_code=HTTP_401_UNAUTHORIZED,
+                content={"detail": "Authorization header with valid Bearer token required"},
+            )
+
         if auth_header and auth_header.startswith("Bearer "):
             token = auth_header[len("Bearer ") :]
             try:
                 payload = await verify_clerk_token(token)
                 ctx_token = auth_header_ctx.set(payload)
             except Exception as exc:  # noqa: BLE001
                 logger.warning(f"Failed to verify Clerk token: {exc}")
+                return JSONResponse(
+                    status_code=HTTP_401_UNAUTHORIZED,
+                    content={"detail": "Invalid Clerk token"}
+                )
 
     try:
         return await call_next(request)

src/frontend/src/clerk/auth.tsx

@@ -60,6 +60,7 @@ export async function backendLogin(username: string,token:string) {
     }).toString(),
     {
       headers: {
+        Authorization: `Bearer ${token}`,
         "Content-Type": "application/x-www-form-urlencoded",
       },
     },

src/frontend/src/clerk/login-pages.tsx

@@ -7,11 +7,13 @@ import { IS_CLERK_AUTH } from "@/clerk/auth";
 export function ClerkLoginPage() {
   return (
     <SignedOut>
-      <SignIn
-        path="/login"
-        routing="path"
-        afterSignInUrl="/"
-      />
+      <div style={centeredStyle}>
+        <SignIn
+          path="/login"
+          routing="path"
+          afterSignInUrl="/"
+        />
+      </div>
     </SignedOut>
   );
 }
@@ -50,11 +52,13 @@ export function ClerkSignUpPage() {
 
   return (
     <SignedOut>
-      <SignUp
-        path="/sign-up"
-        routing="path"
-        afterSignUpUrl="/login"
-      />
+      <div style={centeredStyle}>
+        <SignUp
+          path="/sign-up"
+          routing="path"
+          afterSignUpUrl="/login"
+        />
+      </div>
     </SignedOut>
   );
 }
@@ -68,3 +72,9 @@ export const LoginPage = IS_CLERK_AUTH ? ClerkLoginPage : OriginalLoginPage;
 export const SignUpPage = IS_CLERK_AUTH ? ClerkSignUpPage : OriginalSignUp;
 export const LoginAdminPage = IS_CLERK_AUTH ? ClerkLoginPage : OriginalLoginAdminPage;
 
+const centeredStyle: React.CSSProperties = {
+  display: "flex",
+  justifyContent: "center",
+  alignItems: "center",
+  minHeight: "100vh",
+};