Skip to content

Conversation

@0xi4o
Copy link
Contributor

@0xi4o 0xi4o commented Nov 7, 2025

  • Adds a rate-limited page
  • Handle 429 TOO MANY REQUESTS errors and redirect to rate-limited page
screenshot-2025-11-10_14-51-56
  • Handle 429 TOO MANY REQUESTS errors on auth endpoints and show errors. Auth endpoints like register, login, forgot password, and reset password have a much stricter rate limit.
screenshot-2025-11-27_15-04-58 screenshot-2025-11-27_15-03-15

@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @0xi4o, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request enhances the application's robustness and user experience by gracefully handling API rate-limiting scenarios. It introduces a new user interface to inform users about rate limits and provides a mechanism to automatically redirect them to this page when a 429 error occurs, along with a countdown before they can retry their actions.

Highlights

  • New Rate-Limited Page: Introduced a dedicated RateLimitedPage component to inform users when they have exceeded API rate limits, providing a clear message and a countdown timer.
  • 429 Error Handling: Implemented global error handling within ErrorContext to detect HTTP 429 (Too Many Requests) errors and automatically redirect users to the new rate-limited page. The retry-after header is used to set the initial countdown.
  • User Experience: The new page includes a 'Try Again' button that becomes active after the countdown, and a 'Back to Home' button for authenticated users, improving the user experience during rate-limiting events.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces handling for 429 'Too Many Requests' errors by redirecting the user to a new rate-limited page. The changes include adding the new page and route, and updating the global error handler. My review includes feedback on improving the robustness of parsing the Retry-After header, fixing a memory leak in the countdown timer on the new page, and a suggestion to improve the user experience by using a more appropriate icon.

@0xi4o 0xi4o marked this pull request as draft November 7, 2025 10:18
Copy link
Contributor

@chungyau97 chungyau97 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What will happen when LLM provider returns a 429 error?
Will user be redirected to this 429 page or The error message (e.g., “429: Rate limit exceeded”) will appear directly in the chat box?

@0xi4o
Copy link
Contributor Author

0xi4o commented Nov 10, 2025

What will happen when LLM provider returns a 429 error? Will user be redirected to this 429 page or The error message (e.g., “429: Rate limit exceeded”) will appear directly in the chat box?

When LLM providers return a 429 error, we catch it and return a 500 to the frontend. So those won't redirect to the rate-limited page.

@0xi4o 0xi4o marked this pull request as ready for review November 10, 2025 09:22
Lê Nam Khánh and others added 18 commits November 19, 2025 23:18
Fix typos in docker/worker/Dockerfile
…dition.ts (#5436)

Fix typos in packages/components/nodes/agentflow/Condition/Condition.ts
…ace/ChatHuggingFace.ts (#5437)

Fix typos in packages/components/nodes/chatmodels/ChatHuggingFace/ChatHuggingFace.ts
…ate/ChatPromptTemplate.ts (#5438)

Fix typos in packages/components/nodes/prompts/ChatPromptTemplate/ChatPromptTemplate.ts
…/NavGroup/index.jsx (#5444)

Fix typos in packages/ui/src/layout/MainLayout/Sidebar/MenuList/NavGroup/index.jsx
…ngine/SubQuestionQueryEngine.ts (#5446)

Fix typos in packages/components/nodes/engine/SubQuestionQueryEngine/SubQuestionQueryEngine.ts
…edding/AWSBedrockEmbedding.ts (#5447)

Fix typos in packages/components/nodes/embeddings/AWSBedrockEmbedding/AWSBedrockEmbedding.ts
Fix typos in packages/server/README.md
Integrate AzureChatOpenAI into the Supervisor node to handle user requests alongside ChatOpenAI. This enhancement allows for improved multi-agent conversation management.
* add separate by JSON object

* add file check for Unstructured

* Enhance JSON DocumentLoader: Update label and description for 'Separate by JSON Object' option, and add type check for JSON objects in array processing.
* Refactor UnstructuredFile and UnstructuredFolder loaders to remove deprecated file path handling and enhance folder path validation. Ensure folder paths are sanitized and validated against path traversal attacks.

* Update UnstructuredFolder.ts
#5474)

* feat(security): enhance file path validation and implement non-root Docker user

- Validate resolved full file paths including workspace boundaries in SecureFileStore
- Resolve paths before validation in readFile and writeFile operations
- Run Docker container as non-root flowise user (uid/gid 1001)
- Apply proper file ownership and permissions for application files

Prevents path traversal attacks and follows container security best practices

* Add sensitive system directory validation and Flowise internal file protection

* Update Dockerfile to use default node user

* update validation patterns to include additional system binary directories (/usr/bin, /usr/sbin, /usr/local/bin)

* added isSafeBrowserExecutable function to validate browser executable paths for Playwright and Puppeteer loaders

---------

Co-authored-by: taraka-vishnumolakala <taraka.vishnumolakala@workday.com>
Co-authored-by: Henry Heng <henryheng@flowiseai.com>
Co-authored-by: Henry <hzj94@hotmail.com>
* update dockerfile

* Update Dockerfile
* Updated the executeJavaScriptCode function to automatically detect and install required libraries from import/require statements in the provided code.

* Update utils.ts

* lint-fix
* commented out unstructure folder node

* Update packages/components/nodes/documentloaders/Unstructured/UnstructuredFolder.ts

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
@HenryHengZJ HenryHengZJ merged commit 4e92db6 into main Nov 27, 2025
5 checks passed
@0xi4o 0xi4o deleted the feature/rate-limit-ui branch November 28, 2025 09:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants