fix(auth): Disallow refresh token access to API endpoints (release 1.7.0)

[mpawlow]

Related PR

• fix(auth): Disallow refresh token access to API endpoints #10840

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch mp_LFOSS-2917_refresh-token-fix_release-1.7.0

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

❌ Patch coverage is 71.42857% with 2 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (release-1.7.0@97164d8). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
src/backend/base/langflow/services/auth/utils.py	71.42%	2 Missing ⚠️

Additional details and impacted files

@@               Coverage Diff                @@
##             release-1.7.0   #10874   +/-   ##
================================================
  Coverage                 ?   31.90%           
================================================
  Files                    ?     1367           
  Lines                    ?    66859           
  Branches                 ?    10787           
================================================
  Hits                     ?    21334           
  Misses                   ?    44416           
  Partials                 ?     1109           

Flag	Coverage Δ
backend	51.44% <71.42%> (?)
lfx	40.03% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/backend/base/langflow/services/auth/utils.py	58.43% <71.42%> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.