feat: handle 429 errors and redirect to rate-limited page by 0xi4o · Pull Request #5440 · FlowiseAI/Flowise

0xi4o · 2025-11-07T09:19:55Z

Adds a rate-limited page
Handle 429 TOO MANY REQUESTS errors and redirect to rate-limited page

Handle 429 TOO MANY REQUESTS errors on auth endpoints and show errors. Auth endpoints like register, login, forgot password, and reset password have a much stricter rate limit.

gemini-code-assist · 2025-11-07T09:20:06Z

Summary of Changes

Hello @0xi4o, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request enhances the application's robustness and user experience by gracefully handling API rate-limiting scenarios. It introduces a new user interface to inform users about rate limits and provides a mechanism to automatically redirect them to this page when a 429 error occurs, along with a countdown before they can retry their actions.

Highlights

New Rate-Limited Page: Introduced a dedicated RateLimitedPage component to inform users when they have exceeded API rate limits, providing a clear message and a countdown timer.
429 Error Handling: Implemented global error handling within ErrorContext to detect HTTP 429 (Too Many Requests) errors and automatically redirect users to the new rate-limited page. The retry-after header is used to set the initial countdown.
User Experience: The new page includes a 'Try Again' button that becomes active after the countdown, and a 'Back to Home' button for authenticated users, improving the user experience during rate-limiting events.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request introduces handling for 429 'Too Many Requests' errors by redirecting the user to a new rate-limited page. The changes include adding the new page and route, and updating the global error handler. My review includes feedback on improving the robustness of parsing the Retry-After header, fixing a memory leak in the countdown timer on the new page, and a suggestion to improve the user experience by using a more appropriate icon.

packages/ui/src/views/auth/rateLimited.jsx

packages/ui/src/store/context/ErrorContext.jsx

packages/ui/src/views/auth/rateLimited.jsx

chungyau97

What will happen when LLM provider returns a 429 error?
Will user be redirected to this 429 page or The error message (e.g., “429: Rate limit exceeded”) will appear directly in the chat box?

0xi4o · 2025-11-10T07:53:38Z

What will happen when LLM provider returns a 429 error? Will user be redirected to this 429 page or The error message (e.g., “429: Rate limit exceeded”) will appear directly in the chat box?

When LLM providers return a 429 error, we catch it and return a 500 to the frontend. So those won't redirect to the rate-limited page.

Fix typos in docker/worker/Dockerfile

…dition.ts (#5436) Fix typos in packages/components/nodes/agentflow/Condition/Condition.ts

…ace/ChatHuggingFace.ts (#5437) Fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts

…ate/ChatPromptTemplate.ts (#5438) Fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts

…/NavGroup/index.jsx (#5444) Fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx

…ngine/SubQuestionQueryEngine.ts (#5446) Fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts

…edding/AWSBedrockEmbedding.ts (#5447) Fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts

Fix typos in packages/server/README.md

Integrate AzureChatOpenAI into the Supervisor node to handle user requests alongside ChatOpenAI. This enhancement allows for improved multi-agent conversation management.

* add separate by JSON object * add file check for Unstructured * Enhance JSON DocumentLoader: Update label and description for 'Separate by JSON Object' option, and add type check for JSON objects in array processing.

* Refactor UnstructuredFile and UnstructuredFolder loaders to remove deprecated file path handling and enhance folder path validation. Ensure folder paths are sanitized and validated against path traversal attacks. * Update UnstructuredFolder.ts

#5474) * feat(security): enhance file path validation and implement non-root Docker user - Validate resolved full file paths including workspace boundaries in SecureFileStore - Resolve paths before validation in readFile and writeFile operations - Run Docker container as non-root flowise user (uid/gid 1001) - Apply proper file ownership and permissions for application files Prevents path traversal attacks and follows container security best practices * Add sensitive system directory validation and Flowise internal file protection * Update Dockerfile to use default node user * update validation patterns to include additional system binary directories (/usr/bin, /usr/sbin, /usr/local/bin) * added isSafeBrowserExecutable function to validate browser executable paths for Playwright and Puppeteer loaders --------- Co-authored-by: taraka-vishnumolakala <[email protected]> Co-authored-by: Henry Heng <[email protected]> Co-authored-by: Henry <[email protected]>

* update dockerfile * Update Dockerfile

* Updated the executeJavaScriptCode function to automatically detect and install required libraries from import/require statements in the provided code. * Update utils.ts * lint-fix

[email protected]

* commented out unstructure folder node * Update packages/components/nodes/documentloaders/Unstructured/UnstructuredFolder.ts Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --------- Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

packages/components/src/utils.ts

…5440) * feat: handle 429 errors and redirect to rate-limited page * fix: simplify rate-limited page and better 429 error handling * fix: status code in quotaUsage * update: add back to home button rate-limited page * chore: fix typos in docker/worker/Dockerfile (FlowiseAI#5435) Fix typos in docker/worker/Dockerfile * chore: fix typos in packages/components/nodes/agentflow/Condition/Condition.ts (FlowiseAI#5436) Fix typos in packages/components/nodes/agentflow/Condition/Condition.ts * chore: fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts (FlowiseAI#5437) Fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts * chore: fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts (FlowiseAI#5438) Fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts * docs: fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx (FlowiseAI#5444) Fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx * docs: fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts (FlowiseAI#5446) Fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts * docs: fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts (FlowiseAI#5447) Fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts * docs: fix typos in packages/server/README.md (FlowiseAI#5445) Fix typos in packages/server/README.md * Bugfix/Supervisor Node AzureChatOpenAI (FlowiseAI#5448) Integrate AzureChatOpenAI into the Supervisor node to handle user requests alongside ChatOpenAI. This enhancement allows for improved multi-agent conversation management. * Chore/JSON Array (FlowiseAI#5467) * add separate by JSON object * add file check for Unstructured * Enhance JSON DocumentLoader: Update label and description for 'Separate by JSON Object' option, and add type check for JSON objects in array processing. * Chore/Remove Deprecated File Path Unstructured (FlowiseAI#5478) * Refactor UnstructuredFile and UnstructuredFolder loaders to remove deprecated file path handling and enhance folder path validation. Ensure folder paths are sanitized and validated against path traversal attacks. * Update UnstructuredFolder.ts * feat(security): enhance file path validation and implement non-root D… (FlowiseAI#5474) * feat(security): enhance file path validation and implement non-root Docker user - Validate resolved full file paths including workspace boundaries in SecureFileStore - Resolve paths before validation in readFile and writeFile operations - Run Docker container as non-root flowise user (uid/gid 1001) - Apply proper file ownership and permissions for application files Prevents path traversal attacks and follows container security best practices * Add sensitive system directory validation and Flowise internal file protection * Update Dockerfile to use default node user * update validation patterns to include additional system binary directories (/usr/bin, /usr/sbin, /usr/local/bin) * added isSafeBrowserExecutable function to validate browser executable paths for Playwright and Puppeteer loaders --------- Co-authored-by: taraka-vishnumolakala <[email protected]> Co-authored-by: Henry Heng <[email protected]> Co-authored-by: Henry <[email protected]> * Chore/docker file non root (FlowiseAI#5479) * update dockerfile * Update Dockerfile * remove read write file tools and imports (FlowiseAI#5480) * Bugfix/Custom Function Libraries (FlowiseAI#5472) * Updated the executeJavaScriptCode function to automatically detect and install required libraries from import/require statements in the provided code. * Update utils.ts * lint-fix * Release/3.0.11 (FlowiseAI#5481) [email protected] * [email protected] * Chore/Disable Unstructure Folder (FlowiseAI#5483) * commented out unstructure folder node * Update packages/components/nodes/documentloaders/Unstructured/UnstructuredFolder.ts Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --------- Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * update: condition for handling 429 errors * update: handle rate limit errors in auth pages * fix: crash due to missing import --------- Co-authored-by: Lê Nam Khánh <[email protected]> Co-authored-by: Henry Heng <[email protected]> Co-authored-by: Taraka Vishnumolakala <[email protected]> Co-authored-by: taraka-vishnumolakala <[email protected]> Co-authored-by: Henry <[email protected]> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

feat: handle 429 errors and redirect to rate-limited page

c71303b

gemini-code-assist bot reviewed Nov 7, 2025

View reviewed changes

packages/ui/src/views/auth/rateLimited.jsx Outdated Show resolved Hide resolved

packages/ui/src/store/context/ErrorContext.jsx Outdated Show resolved Hide resolved

packages/ui/src/views/auth/rateLimited.jsx Outdated Show resolved Hide resolved

fix: simplify rate-limited page and better 429 error handling

bee8ce8

0xi4o marked this pull request as draft November 7, 2025 10:18

chungyau97 reviewed Nov 7, 2025

View reviewed changes

fix: status code in quotaUsage

2a08897

0xi4o temporarily deployed to dev November 10, 2025 07:58 — with GitHub Actions Inactive

update: add back to home button rate-limited page

f6b566c

0xi4o marked this pull request as ready for review November 10, 2025 09:22

0xi4o temporarily deployed to dev November 10, 2025 09:26 — with GitHub Actions Inactive

Lê Nam Khánh and others added 18 commits November 19, 2025 23:18

chore: fix typos in docker/worker/Dockerfile (#5435)

aefe3ad

Fix typos in docker/worker/Dockerfile

chore: fix typos in packages/components/nodes/agentflow/Condition/Con…

4df444d

…dition.ts (#5436) Fix typos in packages/components/nodes/agentflow/Condition/Condition.ts

chore: fix typos in packages/components/nodes/chatmodels/ChatHuggingF…

8b66ac7

…ace/ChatHuggingFace.ts (#5437) Fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts

chore: fix typos in packages/components/nodes/prompts/ChatPromptTempl…

51755b1

…ate/ChatPromptTemplate.ts (#5438) Fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts

docs: fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList…

e741898

…/NavGroup/index.jsx (#5444) Fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx

docs: fix typos in packages/components/nodes/engine/SubQuestionQueryE…

7566999

…ngine/SubQuestionQueryEngine.ts (#5446) Fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts

docs: fix typos in packages/components/nodes/embeddings/AWSBedrockEmb…

12131b3

…edding/AWSBedrockEmbedding.ts (#5447) Fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts

docs: fix typos in packages/server/README.md (#5445)

656f68f

Fix typos in packages/server/README.md

Bugfix/Supervisor Node AzureChatOpenAI (#5448)

901eca1

Integrate AzureChatOpenAI into the Supervisor node to handle user requests alongside ChatOpenAI. This enhancement allows for improved multi-agent conversation management.

Chore/JSON Array (#5467)

f0a2451

* add separate by JSON object * add file check for Unstructured * Enhance JSON DocumentLoader: Update label and description for 'Separate by JSON Object' option, and add type check for JSON objects in array processing.

Chore/docker file non root (#5479)

4e2f87d

* update dockerfile * Update Dockerfile

remove read write file tools and imports (#5480)

cc84b9b

Bugfix/Custom Function Libraries (#5472)

75e0f75

* Updated the executeJavaScriptCode function to automatically detect and install required libraries from import/require statements in the provided code. * Update utils.ts * lint-fix

Release/3.0.11 (#5481)

8e81a43

[email protected]

[email protected]

ff0f3f1

0xi4o added 2 commits November 19, 2025 23:18

update: condition for handling 429 errors

3ee2626

update: handle rate limit errors in auth pages

4ece068

0xi4o temporarily deployed to dev November 26, 2025 09:56 — with GitHub Actions Inactive

fix: crash due to missing import

78bc733

0xi4o temporarily deployed to dev November 27, 2025 08:38 — with GitHub Actions Inactive

github-advanced-security bot found potential problems Nov 27, 2025

View reviewed changes

packages/components/src/utils.ts Fixed Show fixed Hide fixed

Merge branch 'main' into feature/rate-limit-ui

5fdf2ee

HenryHengZJ approved these changes Nov 27, 2025

View reviewed changes

HenryHengZJ merged commit 4e92db6 into main Nov 27, 2025
5 checks passed

0xi4o deleted the feature/rate-limit-ui branch November 28, 2025 09:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: handle 429 errors and redirect to rate-limited page#5440

feat: handle 429 errors and redirect to rate-limited page#5440
HenryHengZJ merged 26 commits intomainfrom
feature/rate-limit-ui

0xi4o commented Nov 7, 2025 •

edited

Loading

Uh oh!

gemini-code-assist bot commented Nov 7, 2025

Uh oh!

gemini-code-assist bot left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chungyau97 left a comment

Uh oh!

0xi4o commented Nov 10, 2025

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

0xi4o commented Nov 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gemini-code-assist bot commented Nov 7, 2025

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chungyau97 left a comment

Choose a reason for hiding this comment

Uh oh!

0xi4o commented Nov 10, 2025

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

0xi4o commented Nov 7, 2025 •

edited

Loading