fix(api): prevent caching authenticated workflow variables

Merged
WA
1mo ago
+2-8

Summary

  • Return workflow variables with Cache-Control: private, no-store so authenticated responses cannot be stored or reused by HTTP caches.
  • Remove the obsolete cache lifetime and ETag calculation.

Type of Change

  • Bug fix

Testing

  • bun run lint
  • bun run check:audits (51 passed)
  • bun run apps/sim/scripts/check-block-registry.ts origin/staging
  • bun run docs-manifest:check
  • bun run --cwd apps/sim type-check
  • bun run --cwd apps/sim test 'app/api/workflows/[id]/variables/route.test.ts' (2 passed)

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing (new tests pass the test-audit authoring gate)
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)