mirror of
https://github.com/langflow-ai/langflow.git
synced 2026-07-24 07:34:10 +08:00
f76d3e22dd
* feat(security): add failed login logging with IP tracking and comprehensive tests * fix: remove PII from login logs and fix structlog format * docs: agent improvements (#13269) * docs: add structured output for agents * docs: add structured output note * docs: clarify both agent outputs and add release notes * docs: when langflow sends events to the playground and chat history * fix(playground): expand session checkbox click target to full row height (#13349) * fix(playground): expand session checkbox click target to full row height The selectable-row checkbox wrapper was ``w-4 h-4`` (16x16 px) but the row is ``h-8`` (32 px). The 8 px band above and the 8 px band below the visible icon were dead zones that bubbled to the row's ``toggleVisibility`` and navigated to the session instead of toggling selection — exactly the accidental-navigation UX the bug ticket describes. Grow the wrapper to ``w-4 h-8`` so the click target captures the full row height. Width stays narrow so the text alignment is unchanged; the icon itself stays ``h-4 w-4``, centered via the existing ``flex items-center justify-center``. Visual position is identical. Adds ``__tests__/session-selector-checkbox-click-target.test.tsx`` (3 cases): wrapper className guard (h-8 + w-4, not h-4), click on the wrapper outside the icon triggers selection without bubbling to toggleVisibility, and click on the inner icon still toggles selection. * test(playground): drop checkbox-click-target test file (not needed per review) * [autofix.ci] apply automated fixes * test: align session-selector checkbox assertions with full-height click target --------- Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> * fix: improve trace search functionality (#13383) * improve trace search functionality * [autofix.ci] apply automated fixes --------- Co-authored-by: Olayinka Adelakun <olayinkaadelakun@Olayinkas-MacBook-Pro.local> Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> * test: fix test_login_logs_real_output_format to use mocking - Updated test to use patch() instead of capsys for consistency - Verifies structlog kwargs format (not nested extra dict) - All 7 login logging tests now passing * feat: Add IP-based rate limiting to login endpoint - Add slowapi dependency for rate limiting functionality - Implement rate limiting service with configurable limits - Apply rate limiter to /login endpoint (default: 5 attempts/minute per IP) - Add custom exception handler for rate limit exceeded (HTTP 429) - Support both in-memory (default) and Redis storage backends - Add comprehensive test suite with 100% coverage - Document configuration in .env.example Security improvements: - Prevents brute force attacks on login endpoint - Structured logging without PII (logs client_ip, not user data) - Graceful degradation with swallow_errors=True - Proper X-Forwarded-For header handling for proxied requests Configuration: - LANGFLOW_RATE_LIMIT_PER_MINUTE: requests per minute (default: 5) - LANGFLOW_RATE_LIMIT_STORAGE: storage backend (default: memory://) - LANGFLOW_RATE_LIMIT_HEADERS_ENABLED: enable rate limit headers (default: false) * security: add proxy-aware IP extraction for rate limiting - Add LANGFLOW_RATE_LIMIT_TRUST_PROXY configuration - Default to secure get_remote_address (prevents header spoofing) - Enable get_client_ip when behind trusted proxies - Add comprehensive tests for both configurations - Maintain 100% test coverage (15 tests passing) * refactor(rate-limit): address PR review feedback - migrate to Settings model, fix IP security, add test coverage * fix: disable rate limiting in tests to prevent 429 errors - Add LANGFLOW_RATE_LIMIT_ENABLED environment variable control - Disable rate limiting by default in tests via session-scoped fixture - Rate limit tests explicitly enable it via function-scoped fixture - Fixes test failures caused by sequential login attempts hitting 5/min limit * fix: refactor login rate limiting to avoid settings initialization race condition --------- Co-authored-by: Janardan S Kavia <janardanskavia@Janardans-MacBook-Pro.local> Co-authored-by: Mendon Kissling <59585235+mendonk@users.noreply.github.com> Co-authored-by: keval shah <kevalvirat@gmail.com> Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com> Co-authored-by: olayinkaadelakun <olayinka.adelakun@ibm.com> Co-authored-by: Olayinka Adelakun <olayinkaadelakun@Olayinkas-MacBook-Pro.local>
193 lines
6.5 KiB
Plaintext
193 lines
6.5 KiB
Plaintext
# Description: Example of .env file
|
||
# Usage: Copy this file to .env and change the values
|
||
# according to your needs
|
||
# Do not commit .env file to git
|
||
# Do not change .env.example file
|
||
|
||
# Config directory
|
||
# Directory where files, logs and database will be stored
|
||
# Example: LANGFLOW_CONFIG_DIR=~/.langflow
|
||
LANGFLOW_CONFIG_DIR=
|
||
|
||
# Save database in the config directory
|
||
# Values: true, false
|
||
# If false, the database will be saved in Langflow's root directory
|
||
# This means that the database will be deleted when Langflow is uninstalled
|
||
# and that the database will not be shared between different virtual environments
|
||
# Example: LANGFLOW_SAVE_DB_IN_CONFIG_DIR=true
|
||
LANGFLOW_SAVE_DB_IN_CONFIG_DIR=
|
||
|
||
# Database URL
|
||
# Postgres example: LANGFLOW_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/langflow
|
||
# SQLite example:
|
||
LANGFLOW_DATABASE_URL=sqlite:///./langflow.db
|
||
|
||
# Alembic logs path flag. If set to true, Alembic will log to stdout.
|
||
LANGFLOW_ALEMBIC_LOG_TO_STDOUT=False
|
||
|
||
# mem0 creates a directory
|
||
# for chat history, vector stores, and other artifacts
|
||
# its default path is ~/.mem0.
|
||
# we can change this path with
|
||
# environment variable "MEM0_DIR"
|
||
# Example: MEM0_DIR=/tmp/.mem0
|
||
|
||
# composio creates a cache directory
|
||
# for file uploads/downloads.
|
||
# its default path is ~/.composio
|
||
# we can change this path with
|
||
# environment variable "COMPOSIO_CACHE_DIR"
|
||
# Example: COMPOSIO_CACHE_DIR=/tmp/.composio
|
||
|
||
|
||
# Database connection retry
|
||
# Values: true, false
|
||
# If true, the database will retry to connect to the database if it fails
|
||
# Example: LANGFLOW_DATABASE_CONNECTION_RETRY=true
|
||
LANGFLOW_DATABASE_CONNECTION_RETRY=false
|
||
|
||
# Cache type
|
||
LANGFLOW_LANGCHAIN_CACHE=SQLiteCache
|
||
|
||
# Server host
|
||
# Example: LANGFLOW_HOST=localhost
|
||
LANGFLOW_HOST=
|
||
|
||
# Worker processes
|
||
# Example: LANGFLOW_WORKERS=1
|
||
LANGFLOW_WORKERS=
|
||
|
||
# Server port
|
||
# Example: LANGFLOW_PORT=7860
|
||
LANGFLOW_PORT=
|
||
|
||
# Logging level
|
||
# Example: LANGFLOW_LOG_LEVEL=critical
|
||
LANGFLOW_LOG_LEVEL=
|
||
|
||
# Path to the log file
|
||
# Example: LANGFLOW_LOG_FILE=logs/langflow.log
|
||
LANGFLOW_LOG_FILE=
|
||
|
||
# Time/Size for log to rotate
|
||
# Example: LANGFLOW_LOG_ROTATION=‘10 MB’/‘1 day’
|
||
LANGFLOW_LOG_ROTATION=
|
||
|
||
# Path to the frontend directory containing build files
|
||
# Example: LANGFLOW_FRONTEND_PATH=/path/to/frontend/build/files
|
||
LANGFLOW_FRONTEND_PATH=
|
||
|
||
# Whether to open the browser after starting the server
|
||
# Values: true, false
|
||
# Example: LANGFLOW_OPEN_BROWSER=true
|
||
LANGFLOW_OPEN_BROWSER=
|
||
|
||
# Whether to remove API keys from the projects saved in the database
|
||
# Values: true, false
|
||
# Example: LANGFLOW_REMOVE_API_KEYS=false
|
||
LANGFLOW_REMOVE_API_KEYS=
|
||
|
||
# Whether to use RedisCache or ThreadingInMemoryCache or AsyncInMemoryCache
|
||
# Values: async, memory, redis
|
||
# Example: LANGFLOW_CACHE_TYPE=memory
|
||
# If you want to use redis then the following environment variables must be set:
|
||
# LANGFLOW_REDIS_HOST (default: localhost)
|
||
# LANGFLOW_REDIS_PORT (default: 6379)
|
||
# LANGFLOW_REDIS_DB (default: 0)
|
||
# LANGFLOW_REDIS_CACHE_EXPIRE (default: 3600)
|
||
LANGFLOW_CACHE_TYPE=
|
||
|
||
# Set LANGFLOW_AUTO_LOGIN to false if you want to disable auto login
|
||
# and use the login form to login. LANGFLOW_SUPERUSER and LANGFLOW_SUPERUSER_PASSWORD
|
||
# must be set if AUTO_LOGIN is set to false
|
||
# Values: true, false
|
||
LANGFLOW_AUTO_LOGIN=
|
||
|
||
# SET LANGFLOW_ENABLE_SUPERUSER_CLI to false to disable
|
||
# superuser creation via the CLI
|
||
LANGFLOW_ENABLE_SUPERUSER_CLI=
|
||
|
||
# Superuser username
|
||
# Example: LANGFLOW_SUPERUSER=admin
|
||
LANGFLOW_SUPERUSER=
|
||
|
||
# Superuser password
|
||
# Example: LANGFLOW_SUPERUSER_PASSWORD=123456
|
||
LANGFLOW_SUPERUSER_PASSWORD=
|
||
|
||
# API Key Source
|
||
# Controls how API keys are validated for the x-api-key header
|
||
# Values: db, env
|
||
# - db (default): Validates against API keys stored in the database
|
||
# - env: Validates against the LANGFLOW_API_KEY environment variable
|
||
# Example: LANGFLOW_API_KEY_SOURCE=db
|
||
LANGFLOW_API_KEY_SOURCE=
|
||
|
||
# API Key (only used when LANGFLOW_API_KEY_SOURCE=env)
|
||
# The API key to use for authentication when API_KEY_SOURCE is set to 'env'
|
||
# This allows injecting a pre-defined API key via environment variables
|
||
# (useful for Kubernetes Secrets, CI/CD pipelines, etc.)
|
||
# Example: LANGFLOW_API_KEY=your-secure-api-key
|
||
LANGFLOW_API_KEY=
|
||
|
||
# Rate Limiting Configuration
|
||
# Controls rate limiting for login endpoint to prevent brute force attacks
|
||
# LANGFLOW_RATE_LIMIT_PER_MINUTE: Number of login attempts allowed per minute per IP
|
||
# Values: positive integer (default: 5)
|
||
# Example: LANGFLOW_RATE_LIMIT_PER_MINUTE=10
|
||
LANGFLOW_RATE_LIMIT_PER_MINUTE=
|
||
|
||
# LANGFLOW_RATE_LIMIT_STORAGE_URI: Storage backend for rate limit counters
|
||
# Values: memory:// (default, single server) or redis://host:port (production, multiple servers)
|
||
# - memory://: Fast, in-memory storage (not shared between server instances, lost on restart)
|
||
# - redis://localhost:6379: Persistent, shared storage (required for load-balanced deployments)
|
||
# Example: LANGFLOW_RATE_LIMIT_STORAGE_URI=redis://localhost:6379
|
||
LANGFLOW_RATE_LIMIT_STORAGE_URI=
|
||
|
||
# LANGFLOW_RATE_LIMIT_TRUST_PROXY: Trust X-Forwarded-For header for client IP
|
||
# Values: true, false (default: false)
|
||
# When true, uses rightmost X-Forwarded-For IP (the trusted proxy before us)
|
||
# When false, uses direct connection IP (prevents header spoofing in non-proxy deployments)
|
||
# SECURITY: Only enable if behind a trusted proxy (nginx, load balancer, etc.)
|
||
# Example: LANGFLOW_RATE_LIMIT_TRUST_PROXY=true
|
||
LANGFLOW_RATE_LIMIT_TRUST_PROXY=
|
||
|
||
# Should store environment variables in the database
|
||
# Values: true, false
|
||
LANGFLOW_STORE_ENVIRONMENT_VARIABLES=
|
||
|
||
# SSRF (Server-Side Request Forgery) Protection
|
||
# When enabled, blocks requests to private IP ranges, localhost, and cloud metadata endpoints
|
||
# Values: true, false
|
||
# Default: false (for backward compatibility)
|
||
# Set to true to enable protection against SSRF attacks
|
||
LANGFLOW_SSRF_PROTECTION_ENABLED=
|
||
|
||
# SSRF Allowed Hosts
|
||
# Comma-separated list of hosts/IPs/CIDR ranges to allow despite SSRF protection
|
||
# Supports: exact hostnames, wildcard domains (*.example.com), exact IPs, CIDR ranges
|
||
# Example: LANGFLOW_SSRF_ALLOWED_HOSTS=internal-api.company.local,192.168.1.0/24,*.dev.internal
|
||
# Note: Only takes effect when LANGFLOW_SSRF_PROTECTION_ENABLED=true
|
||
LANGFLOW_SSRF_ALLOWED_HOSTS=
|
||
|
||
# Should enable the MCP composer feature in MCP projects
|
||
# Values: true, false
|
||
# Default: true
|
||
LANGFLOW_MCP_COMPOSER_ENABLED=
|
||
|
||
# STORE_URL
|
||
# Example: LANGFLOW_STORE_URL=https://api.langflow.store
|
||
# LANGFLOW_STORE_URL=
|
||
|
||
# DOWNLOAD_WEBHOOK_URL
|
||
#
|
||
# LANGFLOW_DOWNLOAD_WEBHOOK_URL=
|
||
|
||
# LIKE_WEBHOOK_URL
|
||
#
|
||
# LANGFLOW_LIKE_WEBHOOK_URL=
|
||
|
||
# Value must finish with slash /
|
||
#BACKEND_URL=http://localhost:7860/
|
||
BACKEND_URL=
|