Sign in

v21

latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-01144108427.9 KB
Chat

Build Public Tmp

Build a public flow without requiring authentication.

This endpoint is specifically for public flows that don't require authentication. It uses a client_id cookie to create a deterministic flow ID for tracking purposes.

Security Note:

  • The 'data' parameter is NOT accepted to prevent flow definition tampering
  • Public flows must execute the stored flow definition only
  • The flow definition is always loaded from the database
  • Caller-supplied 'inputs.session' is namespaced under the (client_id, flow_id) virtual flow ID so an unauthenticated caller cannot address a session that lives outside its own namespace (CVE-2026-33017)

The endpoint:

  1. Verifies the requested flow is marked as public in the database
  2. Creates a deterministic UUID based on client_id and flow_id
  3. Uses the flow owner's permissions to build the flow
  4. Always loads the flow definition from the database

Requirements:

  • The flow must be marked as PUBLIC in the database
  • The request must include a client_id cookie

Args: flow_id: UUID of the public flow to build background_tasks: Background tasks manager inputs: Optional input values for the flow files: Optional files to include stop_component_id: Optional ID of component to stop at start_component_id: Optional ID of component to start from log_builds: Whether to log the build process flow_name: Optional name for the flow request: FastAPI request object (needed for cookie access) queue_service: Queue service for job management authenticated_user: Optional authenticated user (resolved from cookie/token if present) event_delivery: Optional event delivery type - default is streaming

Returns: Dict with job_id that can be used to poll for build status

post/api/v1/build_public_tmp/{flow_id}/flow

Path parameters

flow_idstring uuid required

Query parameters

stop_component_idstring nullable
start_component_idstring nullable
log_buildsboolean nullable
flow_namestring nullable
event_delivery'streaming' | 'direct' | 'polling'

Request body

filesstring[] nullable

Example request

{
  "inputs": {
    "components": [
      "components_id",
      "Component Name"
    ],
    "input_value": "input_value",
    "session": "session_id"
  }
}

Response

Successful Response

{"stackTrail":"paths:/api/v1/build_public_tmp/{flow_id}/flow:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}