PluginDaemonUnauthorizedError between dify-api and dify-plugin-daemon

[YukiTominaga]

Self Checks

• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
• [FOR CHINESE USERS] 请务必使用英文提交 Issue，否则会被关闭。谢谢！:)
• Please do not modify this template :) and fill in all the required fields.

1. Is this request related to a challenge you're experiencing? Tell me about your story.

Version

dify-api: 1.4.1
dify-plugin-daemon: 0.1.1

I'm deploying on a Kubernetes cluster. According to the Network tab in browser developer tools, PluginDaemonUnauthorizedError occurs when accessing the following endpoints:

• /console/api/workspaces/current/models/model-types/llm
• /console/api/workspaces/current/models/model-types/rerank
• /console/api/workspaces/current/model-providers
• /console/api/workspaces/current/plugin/tasks

Since the Authorization header is present, I suspect that some required environment variables are missing or incorrect. I have configured the following environment variables that seem related:

dify-api

SECRET_KEY=RooGqvJNe2qQgSyUvUsCew/l0gx7+xbPOci6Dw==
PLUGIN_DAEMON_KEY=OvwmX0p3nulEw31p8tfCGwpQTopJnWM6WeYDQ+JU
INNER_API_KEY=OvwmX0p3nulEw31p8tfCGwpQTopJnWM6WeYDQ+JU
INNER_API_KEY_FOR_PLUGIN=OvwmX0p3nulEw31p8tfCGwpQTopJnWM6WeYDQ+JU

dify-plugin-daemon

SERVER_KEY=ohCbvruQX+zDnuwYaJzmEPg6zyT9zheZUv446xIR
DIFY_INNER_API_KEY=OvwmX0p3nulEw31p8tfCGwpQTopJnWM6WeYDQ+JU

2. Additional context or comments

2025-05-31 21:13:16.766 INFO [Thread-61 (process_request_thread)] [_internal.py:97] - 35.191.14.57 - - [31/May/2025 12:13:16] "GET /console/api/workspaces/current/plugin/tasks?page=1&page_size=100 HTTP/1.1" 500 -
2025-05-31 21:13:18.062 INFO [Thread-62 (process_request_thread)] [_internal.py:97] - 10.28.3.1 - - [31/May/2025 12:13:18] "GET /health HTTP/1.1" 200 -
2025-05-31 21:13:20.824 DEBUG [Thread-63 (process_request_thread)] [connectionpool.py:241] - Starting new HTTP connection (1): dify-plugin-daemon:5002
2025-05-31 21:13:20.828 DEBUG [Thread-63 (process_request_thread)] [connectionpool.py:544] - http://dify-plugin-daemon:5002 "GET /plugin/3f6bd093-14ec-46ad-b0a1-82316c62ebae/management/install/tasks?page=1&page_size=100 HTTP/1.1" 401 131
2025-05-31 21:13:20.835 ERROR [Thread-63 (process_request_thread)] [app.py:875] - Exception on /console/api/workspaces/current/plugin/tasks [GET]
Traceback (most recent call last):
File "/app/api/.venv/lib/python3.12/site-packages/flask/app.py", line 917, in full_dispatch_request
rv = self.dispatch_request()
^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask/app.py", line 902, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args) # type: ignore[no-any-return]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask_restful/init.py", line 489, in wrapper
resp = resource(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask/views.py", line 110, in view
return current_app.ensure_sync(self.dispatch_request)(**kwargs) # type: ignore[no-any-return]
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/.venv/lib/python3.12/site-packages/flask_restful/init.py", line 604, in dispatch_request
resp = meth(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/wraps.py", line 199, in decorated
return view(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/libs/login.py", line 94, in decorated_view
return current_app.ensure_sync(func)(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/wraps.py", line 31, in decorated
return view(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/workspace/init.py", line 32, in decorated
return view(*args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^
File "/app/api/controllers/console/workspace/plugin.py", line 316, in get
{"tasks": PluginService.fetch_install_tasks(tenant_id, args["page"], args["page_size"])}
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/services/plugin/plugin_service.py", line 153, in fetch_install_tasks
return manager.fetch_plugin_installation_tasks(tenant_id, page, page_size)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/core/plugin/impl/plugin.py", line 106, in fetch_plugin_installation_tasks
return self._request_with_plugin_daemon_response(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/api/core/plugin/impl/base.py", line 151, in _request_with_plugin_daemon_response
self._handle_plugin_daemon_error(error.error_type, error.message)
File "/app/api/core/plugin/impl/base.py", line 238, in _handle_plugin_daemon_error
raise PluginDaemonUnauthorizedError(description=message)
core.plugin.impl.exc.PluginDaemonUnauthorizedError: PluginDaemonUnauthorizedError: unauthorized

[kurokobo]

Perhaps PLUGIN_DAEMON_KEY on dify-api must be matched with SERVER_KEY on dify-plugin-daemon.

[YukiTominaga]

Thanks for the reply! I'll try it within two days and write the results here.

[YukiTominaga]

You were absolutely right, this really helped me out. Thank you!!