feat(auth): Pluggable AuthService with abstract base class

.secrets.baseline

@@ -755,16 +755,6 @@
         "is_secret": false
       }
     ],
-    "src/backend/base/langflow/inputs/input_mixin.py": [
-      {
-        "type": "Secret Keyword",
-        "filename": "src/backend/base/langflow/inputs/input_mixin.py",
-        "hashed_secret": "3442496b96dd01591a8cd44b1eec1368ab728aba",
-        "is_verified": false,
-        "line_number": 22,
-        "is_secret": false
-      }
-    ],
     "src/backend/base/langflow/initial_setup/starter_projects/Document Q&A.json": [
       {
         "type": "Hex High Entropy String",
@@ -881,6 +871,16 @@
         "is_secret": false
       }
     ],
+    "src/backend/base/langflow/inputs/input_mixin.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "src/backend/base/langflow/inputs/input_mixin.py",
+        "hashed_secret": "3442496b96dd01591a8cd44b1eec1368ab728aba",
+        "is_verified": false,
+        "line_number": 22,
+        "is_secret": false
+      }
+    ],
     "src/backend/base/langflow/schema/table.py": [
       {
         "type": "Secret Keyword",
@@ -897,7 +897,7 @@
         "filename": "src/backend/base/langflow/services/auth/utils.py",
         "hashed_secret": "b894b81be94cf8fa8d7536475aaec876addf05c8",
         "is_verified": false,
-        "line_number": 28,
+        "line_number": 25,
         "is_secret": false
       }
     ],
@@ -1303,7 +1303,7 @@
         "filename": "src/backend/tests/unit/test_setup_superuser.py",
         "hashed_secret": "5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8",
         "is_verified": false,
-        "line_number": 56,
+        "line_number": 60,
         "is_secret": false
       }
     ],
@@ -1528,5 +1528,5 @@
       }
     ]
   },
-  "generated_at": "2025-11-19T18:36:04Z"
+  "generated_at": "2025-11-27T20:39:39Z"
 }

src/backend/base/langflow/__main__.py

@@ -32,7 +32,8 @@
 from langflow.cli.progress import create_langflow_progress
 from langflow.initial_setup.setup import get_or_create_default_folder
 from langflow.main import setup_app
-from langflow.services.auth.utils import check_key, get_current_user_by_jwt
+from langflow.services.auth.utils import get_current_user_from_access_token
+from langflow.services.database.models.api_key.crud import check_key
 from langflow.services.deps import get_db_service, get_settings_service, is_settings_service_initialized, session_scope
 from langflow.services.utils import initialize_services
 from langflow.utils.version import fetch_latest_version, get_version_info
@@ -736,7 +737,7 @@ async def _create_superuser(username: str, password: str, auth_token: str | None
                 # Try JWT first
                 user = None
                 try:
-                    user = await get_current_user_by_jwt(auth_token, session)
+                    user = await get_current_user_from_access_token(auth_token, session)
                 except (JWTError, HTTPException):
                     # Try API key
                     api_key_result = await check_key(session, auth_token)

src/backend/base/langflow/api/v1/api_key.py

@@ -67,7 +67,7 @@ async def save_store_api_key(
         api_key = api_key_request.api_key
 
         # Encrypt the API key
-        encrypted = auth_utils.encrypt_api_key(api_key, settings_service=settings_service)
+        encrypted = auth_utils.encrypt_api_key(api_key)
         current_user.store_api_key = encrypted
         db.add(current_user)
         await db.commit()

src/backend/base/langflow/api/v1/store.py

@@ -24,7 +24,7 @@ def get_user_store_api_key(user: CurrentActiveUser):
     if not user.store_api_key:
         raise HTTPException(status_code=400, detail="You must have a store API key set.")
     try:
-        return auth_utils.decrypt_api_key(user.store_api_key, get_settings_service())
+        return auth_utils.decrypt_api_key(user.store_api_key)
     except Exception as e:
         raise HTTPException(status_code=500, detail="Failed to decrypt API key. Please set a new one.") from e
 
@@ -33,7 +33,7 @@ def get_optional_user_store_api_key(user: CurrentActiveUser):
     if not user.store_api_key:
         return None
     try:
-        return auth_utils.decrypt_api_key(user.store_api_key, get_settings_service())
+        return auth_utils.decrypt_api_key(user.store_api_key)
     except Exception:  # noqa: BLE001
         logger.exception("Failed to decrypt API key")
         return user.store_api_key