From d59757d82fd58acddefed862522a39fe7a67cca0 Mon Sep 17 00:00:00 2001 From: Gabriel Luiz Freitas Almeida Date: Mon, 4 Mar 2024 08:46:39 -0300 Subject: [PATCH] Fix refresh http only variable (#1493) (#1494) * Fix refresh http only variable (#1493) * Fix refresh http only variable * Update version to 0.6.10 in pyproject.toml --- pyproject.toml | 2 +- src/backend/langflow/api/v1/login.py | 9 ++++++--- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e7447b1e23..79dee59944 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "langflow" -version = "0.6.9" +version = "0.6.10" description = "A Python package with a built-in web application" authors = ["Logspace "] maintainers = [ diff --git a/src/backend/langflow/api/v1/login.py b/src/backend/langflow/api/v1/login.py index 2055c18c2d..b0946fd0ab 100644 --- a/src/backend/langflow/api/v1/login.py +++ b/src/backend/langflow/api/v1/login.py @@ -1,5 +1,7 @@ from fastapi import APIRouter, Depends, HTTPException, Request, Response, status from fastapi.security import OAuth2PasswordRequestForm +from sqlmodel import Session + from langflow.api.v1.schemas import Token from langflow.services.auth.utils import ( authenticate_user, @@ -8,7 +10,6 @@ create_user_tokens, ) from langflow.services.deps import get_session, get_settings_service -from sqlmodel import Session router = APIRouter(tags=["Login"]) @@ -85,7 +86,9 @@ async def auto_login( @router.post("/refresh") -async def refresh_token(request: Request, response: Response, settings_service=Depends(get_settings_service)): +async def refresh_token( + request: Request, response: Response, settings_service=Depends(get_settings_service) +): auth_settings = settings_service.auth_settings token = request.cookies.get("refresh_token_lf") @@ -95,7 +98,7 @@ async def refresh_token(request: Request, response: Response, settings_service=D response.set_cookie( "refresh_token_lf", tokens["refresh_token"], - httponly=auth_settings.REFRESH_TOKEN_HTTPONLY, + httponly=auth_settings.REFRESH_HTTPONLY, samesite=auth_settings.REFRESH_SAME_SITE, secure=auth_settings.REFRESH_SECURE, )