ComfyUI-Account-Manager

ComfyUI Account Manager

中文使用文档：30实例全局调度

ComfyUI Account Manager adds login, admin-managed user registration, API token generation, IP filtering, and per-account asset isolation to ComfyUI through a custom node extension.

Features

• Admin-first setup with managed user registration.
• JWT cookie or bearer-token authentication for ComfyUI routes.
• Per-account input, temp, output, queue, and history isolation.
• Per-account image/video asset visibility for generated outputs and uploaded assets.
• Admin accounts can inspect all account assets, including legacy public assets.
• Optional IP allow/deny lists, login timeout protection, HTTPS enforcement, and ComfyUI Manager admin-only access.

Install

cd ComfyUI/custom_nodes
git clone https://github.com/magicwang1111/ComfyUI-Account-Manager
cd ComfyUI-Account-Manager
pip install -r requirements.txt

Restart ComfyUI, open the Web UI, and register the first account. The first registered account becomes the administrator.

Configuration

Edit config.json before starting ComfyUI.

{
  "secret_key_env": "SECRET_KEY",
  "secret_key_file": "secret_key.txt",
  "users_db": "users_db.json",
  "history_db": "history.sqlite3",
  "distributed_queue_enabled": true,
  "scheduler_db": "scheduler.sqlite3",
  "max_concurrent_jobs_per_user": 6,
  "admin_concurrency_limit": 0,
  "resource_concurrency_limits": {
    "gpu": 2,
    "api": 5
  },
  "gpu_node_types": [
    "CheckpointLoaderSimple",
    "UNETLoader",
    "KSampler",
    "SamplerCustomAdvanced",
    "UpscaleModelLoader",
    "ImageUpscaleWithModel",
    "MiniMaxH3TurboSampler"
  ],
  "worker_heartbeat_seconds": 5,
  "worker_stale_seconds": 60,
  "scheduler_secret_file": "scheduler_secret.txt",
  "access_token_expiration_hours": 8760,
  "max_access_token_expiration_hours": 8760,
  "log": "account_manager.log",
  "log_levels": ["INFO"],
  "whitelist": "whitelist.txt",
  "blacklist": "blacklist.txt",
  "blacklist_after_attempts": 0,
  "free_memory_on_logout": false,
  "force_https": false,
  "separate_users": true,
  "manager_admin_only": true
}

separate_users enables account-specific inputs, outputs, queue history, and asset visibility. The older misspelled seperate_users key is still accepted for compatibility, but new installs should use separate_users.

manage_comfyui.sh enables the built-in Node Manager on every worker. Keep manager_admin_only: true so only administrators can install or update custom node code.

distributed_queue_enabled lets multiple ComfyUI processes share one validated prompt queue. Every process must use the same Account Manager directory and must set ACCOUNT_MANAGER_INSTANCE_PORT to its actual listen port. Ordinary accounts can run up to max_concurrent_jobs_per_user prompts across the whole worker pool; additional prompts stay queued. admin_concurrency_limit: 0 makes the administrator exempt from this execution limit.

When gpu_node_types is non-empty, Account Manager scans the submitted API prompt once at the shared queue boundary. A workflow containing any listed class_type is stored as a gpu job; every other workflow is stored as an api job. No custom node changes are required. Mixed workflows are classified as gpu. resource_concurrency_limits sets the per-account limit for each pool, while the number of live workers in that pool remains the global physical capacity. A worker declares its pool with ACCOUNT_MANAGER_WORKER_CLASS=gpu or ACCOUNT_MANAGER_WORKER_CLASS=api. If these resource settings and the worker variable are omitted, the original single-pool behavior remains active.

The included manage_comfyui.sh starts 42 workers on ports 6006-6047 by default. Ports 6006 and 6008 are dedicated GPU workers, one per physical GPU, and the remaining 40 use --cpu for API workflows. Override GPU_COUNT, GPU_WORKER_COUNT, and GPU_WORKER_INDICES when the host layout differs. Every worker keeps --enable-assets and receives its own ComfyUI asset database. Account Manager keeps the queue, history, ownership metadata, and cross-worker event routing in shared plugin-managed storage.

Every instance started by manage_comfyui.sh also streams stdout and stderr to logs/instances/<port>/<startup-time>.log inside the Account Manager directory. The tmux console remains usable. When a distributed job is claimed, its worker port, log file, and starting byte offset are stored in scheduler.sqlite3; the ending offset is added when the job finishes. This keeps large log text out of SQLite while providing a durable one-to-one job/log index. Completed job excerpts are also stored in the separate scheduler_job_logs table inside scheduler.sqlite3 (up to 1 MiB per job). This keeps the hot scheduler row small while allowing job-logs JOB_ID to read the saved excerpt directly from the database. Start/end line numbers are included in --status.

# Last 200 lines for the latest run on port 6006
./manage_comfyui.sh logs 6006

# Follow an instance in real time
./manage_comfyui.sh logs --follow 6006

# Show only the log bytes associated with one job
./manage_comfyui.sh job-logs cc8f0bef-6783-4367-a7bb-776c6f90ec8d

# Follow that job until it reaches a terminal state
./manage_comfyui.sh job-logs --follow cc8f0bef-6783-4367-a7bb-776c6f90ec8d

# Inspect its status, ports, file, and byte offsets
./manage_comfyui.sh job-logs --status cc8f0bef-6783-4367-a7bb-776c6f90ec8d

OSS cloud archive

Completed and failed distributed jobs can be archived asynchronously to Aliyun OSS. The archive keeps public media objects separate from a private, gzip-encoded manifest.json.gz containing a pretty-printed manifest.json with the prompt's related scheduler/history SQLite rows. It supports stable per-server IDs, cross-process SQLite leases, exactly three outer attempts, and controlled historical backfill:

./manage_comfyui.sh cloud-backfill --dry-run --prompt-id PROMPT_ID

See docs/OSS云归档使用文档.md for credentials, configuration, Bucket Policy boundaries, SQL status queries, recovery, and deployment validation. Never commit OSS credentials to this repository.

Jobs submitted before this version have no byte-offset metadata. Their port and time range remain available in the existing scheduler row, but cannot be retroactively sliced with byte-level accuracy.

Completed generation history is persisted in history.sqlite3 and restored when ComfyUI restarts. The history database keeps the same 10,000-item limit as ComfyUI's in-memory history.

Temporary preview images, videos, and audio referenced by completed history are linked into the user's persistent output folder and registered in ComfyUI's asset database before the history entry is saved. This keeps Job Queue previews and Media Assets available after refreshes and restarts.

When another custom node uses an external temp directory, Account Manager resolves the exact source path from the authenticated asset reference instead of assuming ComfyUI's default temp root.

ComfyUI's optional Assets panel is separate from queue history and requires starting ComfyUI with --enable-assets.

API Access

Authenticated API calls can include either:

• Authorization: Bearer <jwt>
• a cookie named jwt_token

Register

POST /register

{
  "new_user_username": "your_username",
  "new_user_password": "your_password",
  "username": "admin_username",
  "password": "admin_password"
}

Login

POST /login

{
  "username": "your_username",
  "password": "your_password"
}

The login response includes user_settings_id, which is used by the frontend to bind ComfyUI requests to the authenticated account.

Notes

• Ordinary users only see assets generated or uploaded under their own account.
• Administrators can view all users' assets and legacy public assets.
• Existing public assets are not migrated automatically.
• A task running on a worker that stops heartbeating is marked worker_lost; it is never submitted again automatically.
• This extension improves access isolation for shared ComfyUI installs, but it is not a substitute for a full security review of your deployment.

Bulk Registration

admin/bulk_register_sentinel.py preserves the existing form-encoded POST /register contract and reads credentials from environment variables:

export COMFYUI_ADMIN_USER='admin-user'
export COMFYUI_ADMIN_PASS='admin-password'
python admin/bulk_register_sentinel.py

Optional variables include COMFYUI_BASE_URL, COMFYUI_USERS_CSV, COMFYUI_REGISTER_RESULTS, COMFYUI_REGISTER_TIMEOUT, and COMFYUI_VERIFY_SSL.