workflows/run api error

[birdOS1]

Self Checks

• I have read the Contributing Guide and Language Policy.
• This is only for bug report, if you would like to ask a question, please head to Discussions.
• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report, otherwise it will be closed.
• 【中文用户 & Non English User】请使用英语提交，否则会被关闭 ：）
• Please do not modify this template :) and fill in all the required fields.

Dify version

1.9.2

Cloud or Self Hosted

Self Hosted (Docker)

Steps to reproduce

Publish workflows and use them in exploration

✔️ Expected Behavior

Workflow is running normally

❌ Actual Behavior

25-10-23 05:33:45.762 ERROR [Dummy-81] [app.py:875] - Exception on /console/api/installed-apps/2b35ba64-c31f-4b55-95db-0d3185ca5ad3/workflows/run [POST]
Traceback (most recent call last):
File "/app/api/.venv/lib/python3.12/site-packages/flask/app.py", line 917, in full_dispatch_request
rv = self.dispatch_request()
^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask/app.py", line 902, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args) # type: ignore[no-any-return]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask_restx/api.py", line 404, in wrapper
resp = resource(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask/views.py", line 110, in view
return current_app.ensure_sync(self.dispatch_request)(**kwargs) # type: ignore[no-any-return]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask_restx/resource.py", line 41, in dispatch_request
resp = meth(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/libs/login.py", line 80, in decorated_view
return current_app.ensure_sync(func)(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/wraps.py", line 36, in decorated
return view(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/explore/wraps.py", line 41, in decorated
return view(installed_app, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/explore/wraps.py", line 65, in decorated
return view(installed_app, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/explore/workflow.py", line 56, in post
assert current_user is not None
^^^^^^^^^^^^^^^^^^^^^^^^
AssertionError

[dosubot]

The error happens because the API endpoint expects an authenticated user context (current_user), but it's missing when you call /console/api/installed-apps/{app_id}/workflows/run. In Dify, current_user is set via Flask's session and authentication system, which relies on cookies or tokens being present and valid in the request. If you're running self-hosted (Docker), this can break if:

• The session cookie or auth token isn't sent with the request (for example, if you're calling the API directly or your frontend isn't passing credentials).
• Your reverse proxy (like Nginx) or Docker networking is stripping or not forwarding authentication headers/cookies.
• There's a misconfiguration in how sessions are persisted or shared between containers.

To fix this, make sure:

• You're authenticated in the browser or API client before running the workflow.
• The session cookie or token is included in the request to the /workflows/run endpoint.
• Your proxy and Docker setup forward all headers and cookies correctly.
• If you use a custom domain or HTTPS, check that cookie domains and secure flags are set properly.

If you want to test quickly, try running the workflow from the same browser session where you logged into the Dify console UI. If it works there but not via API or another tool, it's almost certainly a session/auth propagation issue.

For more details, see the relevant code for how current_user is set and checked here and here.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}    

[Richie666888]

+1