langflow-ai/langflow · error · HTTPException

External credentials do not allow this action

Error message

External credentials do not allow this action

What it means

Error "External credentials do not allow this action" thrown in langflow-ai/langflow.

Source

Thrown at src/backend/base/langflow/api/v1/endpoints.py:1348

async def get_version():
    return get_version_info()


@router.post("/custom_component", status_code=HTTPStatus.OK, include_in_schema=False)
async def custom_component(
    raw_code: CustomComponentRequest,
    user: CurrentActiveUser,
    request: Request,
) -> CustomComponentResponse:
    # Building a custom component instantiates (and partially executes) posted
    # code. That is a create/write-class action, so enforce the external access
    # ceiling directly: a "viewer" external identity is denied while
    # editor/admin (and all non-external users) pass unchanged. This route is
    # not tied to a single owned resource, so the deny-only primitive is used
    # instead of an ``ensure_*_permission`` guard.
    external_context = get_current_external_access_context()
    if external_context is not None and not external_access_allows("create", external_context):
        raise HTTPException(
            status_code=status.HTTP_403_FORBIDDEN,
            detail="External credentials do not allow this action",
        )

    settings_service = get_settings_service()
    settings = settings_service.settings
    all_known = None
    if _requires_component_hash_lookups(settings, user):
        # Lazily compute hash lookups if they haven't been built yet
        # (e.g. during startup before the cache is fully populated).
        get_component_hash_lookups_for_validation()
        all_known = component_cache.all_known_hashes
        if all_known is None:
            raise HTTPException(
                status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
                detail="Component templates are still initializing. Please try again in a few seconds.",
            )

View on GitHub (pinned to 976ec789d2)

Solutions

1. Use credentials with the required scope for this action, or perform the action with an interactive user session instead of external credentials.

When it happens

Trigger: Occurs when a request authenticated with externally managed credentials attempts an action those credentials are not permitted to perform.

Common situations: See trigger scenarios.

AI-assisted analysis of langflow-ai/langflow@976ec789d2 (2026-08-14). Data as JSON: /api/errors/dc9c91e9aec42342. Report an issue: GitHub.