langflow-base-nightly 0.5.0.dev38__py3-none-any.whl → 0.5.1.dev0__py3-none-any.whl

langflow/services/auth/mcp_encryption.py

@@ -0,0 +1,104 @@
+"""MCP Authentication encryption utilities for secure credential storage."""
+
+from typing import Any
+
+from cryptography.fernet import InvalidToken
+from loguru import logger
+
+from langflow.services.auth import utils as auth_utils
+from langflow.services.deps import get_settings_service
+
+# Fields that should be encrypted when stored
+SENSITIVE_FIELDS = [
+    "oauth_client_secret",
+    "api_key",
+]
+
+
+def encrypt_auth_settings(auth_settings: dict[str, Any] | None) -> dict[str, Any] | None:
+    """Encrypt sensitive fields in auth_settings dictionary.
+
+    Args:
+        auth_settings: Dictionary containing authentication settings
+
+    Returns:
+        Dictionary with sensitive fields encrypted, or None if input is None
+    """
+    if auth_settings is None:
+        return None
+
+    settings_service = get_settings_service()
+    encrypted_settings = auth_settings.copy()
+
+    for field in SENSITIVE_FIELDS:
+        if encrypted_settings.get(field):
+            try:
+                # Only encrypt if the value is not already encrypted
+                # Try to decrypt first - if it fails, it's not encrypted
+                try:
+                    auth_utils.decrypt_api_key(encrypted_settings[field], settings_service)
+                    # If decrypt succeeds, it's already encrypted
+                    logger.debug(f"Field {field} is already encrypted")
+                except (ValueError, TypeError, KeyError, InvalidToken):
+                    # If decrypt fails, the value is plaintext and needs encryption
+                    encrypted_value = auth_utils.encrypt_api_key(encrypted_settings[field], settings_service)
+                    encrypted_settings[field] = encrypted_value
+                    logger.debug(f"Encrypted field {field}")
+            except (ValueError, TypeError, KeyError) as e:
+                logger.error(f"Failed to encrypt field {field}: {e}")
+                raise
+
+    return encrypted_settings
+
+
+def decrypt_auth_settings(auth_settings: dict[str, Any] | None) -> dict[str, Any] | None:
+    """Decrypt sensitive fields in auth_settings dictionary.
+
+    Args:
+        auth_settings: Dictionary containing encrypted authentication settings
+
+    Returns:
+        Dictionary with sensitive fields decrypted, or None if input is None
+    """
+    if auth_settings is None:
+        return None
+
+    settings_service = get_settings_service()
+    decrypted_settings = auth_settings.copy()
+
+    for field in SENSITIVE_FIELDS:
+        if decrypted_settings.get(field):
+            try:
+                decrypted_value = auth_utils.decrypt_api_key(decrypted_settings[field], settings_service)
+                decrypted_settings[field] = decrypted_value
+                logger.debug(f"Decrypted field {field}")
+            except (ValueError, TypeError, KeyError, InvalidToken) as e:
+                # If decryption fails, assume the value is already plaintext
+                # This handles backward compatibility with existing unencrypted data
+                logger.debug(f"Field {field} appears to be plaintext or decryption failed: {e}")
+                # Keep the original value
+
+    return decrypted_settings
+
+
+def is_encrypted(value: str) -> bool:
+    """Check if a value appears to be encrypted.
+
+    Args:
+        value: String value to check
+
+    Returns:
+        True if the value appears to be encrypted (base64 Fernet token)
+    """
+    if not value:
+        return False
+
+    settings_service = get_settings_service()
+    try:
+        # Try to decrypt - if it succeeds, it's encrypted
+        auth_utils.decrypt_api_key(value, settings_service)
+    except (ValueError, TypeError, KeyError, InvalidToken):
+        # If decryption fails, it's not encrypted
+        return False
+    else:
+        return True

langflow/services/settings/feature_flags.py

@@ -3,7 +3,7 @@ from pydantic_settings import BaseSettings
 
 class FeatureFlags(BaseSettings):
     mvp_components: bool = False
-    mcp_composer: bool = False
+    mcp_composer: bool = True
 
     class Config:
         env_prefix = "LANGFLOW_FEATURE_"

{langflow_base_nightly-0.5.0.dev38.dist-info → langflow_base_nightly-0.5.1.dev0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: langflow-base-nightly
-Version: 0.5.0.dev38
+Version: 0.5.1.dev0
 Summary: A Python package with a built-in web application
 Project-URL: Repository, https://github.com/langflow-ai/langflow
 Project-URL: Documentation, https://docs.langflow.org