Remove auth tokens from history storage

Remove auth_token_comfy_org and api_key_comfy_org from extra_data before
storing prompt history to prevent sensitive authentication tokens from
being persisted in the history endpoint response.
This commit is contained in:
bymyself 2025-07-12 13:41:25 -07:00
parent b7ff5bd14d
commit 94a283523c

View File

@ -1045,6 +1045,12 @@ class PromptQueue:
if status is not None:
status_dict = copy.deepcopy(status._asdict())
# Remove auth tokens from extra_data before storing in history
if "auth_token_comfy_org" in prompt[3]:
del prompt[3]["auth_token_comfy_org"]
if "api_key_comfy_org" in prompt[3]:
del prompt[3]["api_key_comfy_org"]
self.history[prompt[1]] = {
"prompt": prompt,
"outputs": {},