langflow-ai
diff --git a/‎.github/workflows/lint-js.yml‎
Lines changed: 10 additions & 6 deletions b/‎.github/workflows/lint-js.yml‎
Lines changed: 10 additions & 6 deletions
diff --git a/‎.secrets.baseline‎
Lines changed: 2 additions & 2 deletions b/‎.secrets.baseline‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎src/backend/base/langflow/api/v1/authz_me.py‎
Lines changed: 5 additions & 1 deletion b/‎src/backend/base/langflow/api/v1/authz_me.py‎
Lines changed: 5 additions & 1 deletion
diff --git a/‎src/backend/base/langflow/api/v1/chat.py‎
Lines changed: 20 additions & 0 deletions b/‎src/backend/base/langflow/api/v1/chat.py‎
Lines changed: 20 additions & 0 deletions
diff --git a/‎src/backend/base/langflow/api/v1/mcp_projects.py‎
Lines changed: 16 additions & 3 deletions b/‎src/backend/base/langflow/api/v1/mcp_projects.py‎
Lines changed: 16 additions & 3 deletions
diff --git a/‎src/backend/base/langflow/initial_setup/starter_projects/Blog Writer.json‎
Lines changed: 23 additions & 2 deletions b/‎src/backend/base/langflow/initial_setup/starter_projects/Blog Writer.json‎
Lines changed: 23 additions & 2 deletions
diff --git a/‎src/backend/base/langflow/initial_setup/starter_projects/Custom Component Generator.json‎
Lines changed: 69 additions & 6 deletions b/‎src/backend/base/langflow/initial_setup/starter_projects/Custom Component Generator.json‎
Lines changed: 69 additions & 6 deletions
diff --git a/‎src/backend/base/langflow/initial_setup/starter_projects/Pokédex Agent.json‎
Lines changed: 2 additions & 2 deletions b/‎src/backend/base/langflow/initial_setup/starter_projects/Pokédex Agent.json‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎src/backend/base/langflow/initial_setup/starter_projects/Simple Agent.json‎
Lines changed: 23 additions & 2 deletions b/‎src/backend/base/langflow/initial_setup/starter_projects/Simple Agent.json‎
Lines changed: 23 additions & 2 deletions
diff --git a/‎src/backend/base/langflow/initial_setup/starter_projects/Travel Planning Agents.json‎
Lines changed: 23 additions & 2 deletions b/‎src/backend/base/langflow/initial_setup/starter_projects/Travel Planning Agents.json‎
Lines changed: 23 additions & 2 deletions
@@ -90,12 +90,16 @@ jobs:
           RELATIVE_FILES=$(echo "$CHANGED_FILES" | sed 's|^src/frontend/||')
 
           cd src/frontend
+          # NUL-delimit so paths containing spaces (e.g. starter-project
+          # specs like "Basic Prompting.spec.ts") aren't split by xargs.
           if ${{ inputs.allow-failure || 'false' }}; then
-            echo "$RELATIVE_FILES" | xargs npx @biomejs/biome check \
-              --files-ignore-unknown=true \
-              --diagnostic-level=error || echo "Biome found errors (non-blocking for this run)."
+            printf '%s\n' "$RELATIVE_FILES" | tr '\n' '\0' \
+              | xargs -0 npx @biomejs/biome check \
+                --files-ignore-unknown=true \
+                --diagnostic-level=error || echo "Biome found errors (non-blocking for this run)."
           else
-            echo "$RELATIVE_FILES" | xargs npx @biomejs/biome check \
-              --files-ignore-unknown=true \
-              --diagnostic-level=error
+            printf '%s\n' "$RELATIVE_FILES" | tr '\n' '\0' \
+              | xargs -0 npx @biomejs/biome check \
+                --files-ignore-unknown=true \
+                --diagnostic-level=error
           fi
@@ -2827,7 +2827,7 @@
         "filename": "src/backend/base/langflow/services/database/models/api_key/crud.py",
         "hashed_secret": "920f8f5815b381ea692e9e7c2f7119f2b1aa620a",
         "is_verified": false,
-        "line_number": 124,
+        "line_number": 134,
         "is_secret": false
       }
     ],
@@ -9287,5 +9287,5 @@
       }
     ]
   },
-  "generated_at": "2026-06-17T18:50:52Z"
+  "generated_at": "2026-06-17T19:13:55Z"
 }
@@ -17,6 +17,7 @@
 from pydantic import BaseModel, Field, field_validator
 
 from langflow.api.utils import CurrentActiveUser
+from langflow.services.auth.context import current_auth_context_for_authz
 from langflow.services.authorization.access_ceiling import filter_actions_by_external_access_ceiling
 from langflow.services.deps import get_authorization_service
 
@@ -128,7 +129,10 @@ async def get_effective_permissions(
         resource_ids=body.resource_ids,
         actions=actions,
         domain=body.domain,
-        context={"is_superuser": getattr(current_user, "is_superuser", False)},
+        context={
+            **current_auth_context_for_authz(),
+            "is_superuser": current_user.is_superuser,
+        },
     )
     permissions = {
         resource_id: filter_actions_by_external_access_ceiling(allowed_actions)
 
@@ -887,6 +887,10 @@ async def build_public_tmp(
             queue_service=queue_service,
             flow_name=flow_name or f"{authenticated_user_id or client_id}_{flow_id}",
         )
+        # Gate the public events/cancel endpoints to jobs that were actually
+        # started through this public build path, preventing unauthenticated
+        # callers from reading or cancelling private-flow builds by job_id.
+        await queue_service.register_public_job(job_id)
     except CustomComponentValidationError as exc:
         await logger.awarning(f"Public flow validation failed: {exc}")
         raise HTTPException(status_code=400, detail="This flow cannot be executed.") from exc
@@ -906,6 +910,20 @@ async def build_public_tmp(
     )
 
 
+async def _assert_public_job(job_id: str, queue_service: JobQueueService) -> None:
+    """Raise HTTP 404 if job_id was not registered through the public build endpoint.
+
+    Prevents unauthenticated callers from reading or cancelling private-flow
+    builds by guessing or leaking a job_id.
+
+    Why 404 not 403: returning 403 would confirm the job exists under a different
+    access tier, leaking information about private builds. 404 is neutral.
+    """
+    if not await queue_service.is_public_job_async(job_id):
+        # Static detail — do not reflect job_id back; avoid confirming which IDs exist.
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Job not found")
+
+
 @router.get("/build_public_tmp/{job_id}/events")
 async def get_build_events_public(
     job_id: str,
@@ -918,6 +936,7 @@ async def get_build_events_public(
     This endpoint does not require authentication, matching the public build endpoint.
     It is used by the shareable playground to consume build events.
     """
+    await _assert_public_job(job_id, queue_service)
     return await get_flow_events_response(
         job_id=job_id,
         queue_service=queue_service,
@@ -938,6 +957,7 @@ async def cancel_build_public(
     This endpoint does not require authentication, matching the public build endpoint.
     It is used by the shareable playground to cancel builds.
     """
+    await _assert_public_job(job_id, queue_service)
     try:
         cancellation_success = await cancel_flow_build(job_id=job_id, queue_service=queue_service)
 
 
@@ -67,9 +67,15 @@
     MCPSettings,
 )
 from langflow.services.auth.constants import AUTO_LOGIN_WARNING
+from langflow.services.auth.context import (
+    AUTH_METHOD_AUTO_LOGIN,
+    AuthCredentialContext,
+    clear_current_auth_context,
+    set_current_auth_context,
+)
 from langflow.services.auth.mcp_encryption import decrypt_auth_settings, encrypt_auth_settings
 from langflow.services.database.models import Flow, Folder
-from langflow.services.database.models.api_key.crud import check_key, create_api_key
+from langflow.services.database.models.api_key.crud import authenticate_api_key, create_api_key
 from langflow.services.database.models.api_key.model import ApiKeyCreate
 from langflow.services.database.models.user.crud import get_user_by_username
 from langflow.services.database.models.user.model import User
@@ -93,6 +99,10 @@ async def verify_project_auth(
     This function provides authentication for MCP endpoints when using MCP Composer and no API key is provided,
     or checks if the API key is valid.
     """
+    # Mirror the service.py auth entrypoints: reset request-local credential metadata at entry so a
+    # later branch (e.g. the composer-token fast path) never inherits stale context from a prior call.
+    clear_current_auth_context()
+
     settings_service = get_settings_service()
 
     project = (await db.exec(select(Folder).where(Folder.id == project_id))).first()
@@ -144,9 +154,11 @@ async def verify_project_auth(
             )
 
         # Validate the API key
-        user = await check_key(db, api_key)
-        if not user:
+        api_key_result = await authenticate_api_key(db, api_key)
+        if not api_key_result:
             raise HTTPException(status_code=401, detail="Invalid API key")
+        set_current_auth_context(AuthCredentialContext.from_api_key_result(api_key_result))
+        user = api_key_result.user
 
         # Verify user has access to the project
         project_access = (
@@ -171,6 +183,7 @@ async def _superuser_fallback(db: AsyncSession, settings_service) -> User:
     result = await get_user_by_username(db, settings_service.auth_settings.SUPERUSER)
     if result:
         logger.warning(AUTO_LOGIN_WARNING)
+        set_current_auth_context(AuthCredentialContext(method=AUTH_METHOD_AUTO_LOGIN))
         return result
     raise HTTPException(
         status_code=status.HTTP_403_FORBIDDEN,
Original file line number	Diff line number	Diff line change
`@@ -2827,7 +2827,7 @@`
`2827`	`2827`	`"filename": "src/backend/base/langflow/services/database/models/api_key/crud.py",`
`2828`	`2828`	`"hashed_secret": "920f8f5815b381ea692e9e7c2f7119f2b1aa620a",`
`2829`	`2829`	`"is_verified": false,`
`2830`		`- "line_number": 124,`
	`2830`	`+ "line_number": 134,`
`2831`	`2831`	`"is_secret": false`
`2832`	`2832`	`}`
`2833`	`2833`	`],`
`@@ -9287,5 +9287,5 @@`
`9287`	`9287`	`}`
`9288`	`9288`	`]`
`9289`	`9289`	`},`
`9290`		`- "generated_at": "2026-06-17T18:50:52Z"`
	`9290`	`+ "generated_at": "2026-06-17T19:13:55Z"`
`9291`	`9291`	`}`