The chat interface appears to require an API key even though it shouldn't. When the API key is removed, requests fail with a 403 error. This is consistently reproducible.
Steps to Reproduce:
Remove the API key from the configuration.
Submit a chat message.
Expected Behavior:
The chat interface should function without requiring an API key.
Actual Behavior:
The request fails with a 403 error.
Error Details:
{
"message": "ERR_BAD_REQUEST",
"code": "ERR_BAD_REQUEST",
"status": 403,
"config": {
"transitional": {
"silentJSONParsing": true,
"forcedJSONParsing": true,
"clarifyTimeoutError": false
},
"adapter": [
"xhr",
"http"
],
"transformRequest": [
null
],
"transformResponse": [
null
],
"timeout": 0,
"xsrfCookieName": "XSRF-TOKEN",
"xsrfHeaderName": "X-XSRF-TOKEN",
"maxContentLength": -1,
"maxBodyLength": -1,
"env": {},
"headers": {
"Accept": "application/json, text/plain, _/_",
"Content-Type": "application/json"
},
"method": "post",
"url": "https://somedomain.com/api/v1/run/09b40xxxxxxxxxxxxxxxxxxxxxx43849",
"data": "{\"input_type\":\"chat\",\"input_value\":\"Hello\",\"output_type\":\"chat\",\"session_id\":\"ebe9xxxxxxxxxxxxxxxxxxxxxa2952f0\"}"
}
}
Request Payload:
{
"input_type": "chat",
"input_value": "Hello",
"output_type": "chat",
"session_id": "ebe9xxxxxxxxxxxxxxxxxxxxxxxxxxxxda2952f0"
}
URL:
https://somedomain.com/api/v1/run/09b40xxxxxxxxxxxxxxxxxxxxxx43849
Stack Trace (for reference):
Object { message: "Request failed with status code 403", name: "AxiosError", code: "ERR_BAD_REQUEST", config: {…}, request: XMLHttpRequest, response: {…}, stack: "", … }
{
"message": "Request failed with status code 403",
"name": "AxiosError",
"stack": "u@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2129466\nEventHandlerNonNull*Za.xhr</<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2129733\nZa.xhr<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2128652\nGa@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2132024\nvalue@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2135586\ne/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2136298\nkQ/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2109672\noT/t/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2139707\nl@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2104893\n_Q/s/<.value<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2104666\n_Q/y/</<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2105252\nSQ@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2109552\nQ@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2139941\noT/oT/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2140001\noT@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2139879\noT@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2140015\naT/G/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2142128\nG@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2142150\nonKeyDown@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2144854\n4463/It/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1793024\nIt@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1793062\n4463/Hr/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1811233\nHr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1811327\nvr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1811743\n4463/Or/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1817121\nNT@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1872814\nOt@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1792056\nOr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1813023\nBe@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1798797\nje@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1798579\nEventListener.handleEvent*wr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1812528\nxr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1811934\n4463/Vr/<@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1812103\nVr@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1812047\n4463/e.createRoot@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1902425\nS@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:1938114\nvalue@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2146174\nvalue@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2146090\nLifecycleAttributeChangedCallback*@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2145182\n@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2198783\n@https://cdn.jsdelivr.net/gh/logspace-ai/langflow-embedded-chat@v1.0.7/dist/build/static/js/bundle.min.js:1:2198786\n",
"config": {
"transitional": {
"silentJSONParsing": true,
"forcedJSONParsing": true,
"clarifyTimeoutError": false
},
"adapter": [
"xhr",
"http"
],
"transformRequest": [
null
],
"transformResponse": [
null
],
"timeout": 0,
"xsrfCookieName": "XSRF-TOKEN",
"xsrfHeaderName": "X-XSRF-TOKEN",
"maxContentLength": -1,
"maxBodyLength": -1,
"env": {},
"headers": {
"Accept": "application/json, text/plain, */*",
"Content-Type": "application/json"
},
"method": "post",
"url": "https://somedomain.com/api/v1/run/09b40xxxxxxxxxxxxxxxxxxxxxxxxxa43849",
"data": "{\"input_type\":\"chat\",\"input_value\":\"Hello\",\"output_type\":\"chat\",\"session_id\":\"ebe93xxxxxxxxxxxxxxxxxxxxxxxxxda2952f0\"}"
},
"code": "ERR_BAD_REQUEST",
"status": 403
}
Additional Notes:
I've verified this behaviour multiple times. Removing the API key consistently results in a 403 error. Let me know if you need any additional information.
The chat interface appears to require an API key even though it shouldn't. When the API key is removed, requests fail with a 403 error. This is consistently reproducible.
Steps to Reproduce:
Expected Behavior:
The chat interface should function without requiring an API key.
Actual Behavior:
The request fails with a 403 error.
Error Details:
Request Payload:
URL:
https://somedomain.com/api/v1/run/09b40xxxxxxxxxxxxxxxxxxxxxx43849
Stack Trace (for reference):
Object { message: "Request failed with status code 403", name: "AxiosError", code: "ERR_BAD_REQUEST", config: {…}, request: XMLHttpRequest, response: {…}, stack: "", … }
Additional Notes:
I've verified this behaviour multiple times. Removing the API key consistently results in a 403 error. Let me know if you need any additional information.