add warning about the env vars

Author: adhami3310

reflex/app.py

@@ -686,9 +686,17 @@ def _add_optional_endpoints(self):
             )
         if environment.REFLEX_ADD_ALL_ROUTES_ENDPOINT.get():
             self.add_all_routes_endpoint()
-        if environment.REFLEX_ADD_ACTIVE_CONNECTIONS_ENDPOINT.get():
+        if environment.REFLEX_INSECURE_ADD_ACTIVE_CONNECTIONS_ENDPOINT.get():
+            console.warn(
+                f"The `{environment.REFLEX_INSECURE_ADD_ACTIVE_CONNECTIONS_ENDPOINT.name}` environment variable is set to True. "
+                "This endpoint is insecure and should not be used in production."
+            )
             self.add_active_connections_endpoint()
-        if environment.REFLEX_ADD_CLONE_STATE_ENDPOINT.get():
+        if environment.REFLEX_INSECURE_ADD_CLONE_STATE_ENDPOINT.get():
+            console.warn(
+                f"The `{environment.REFLEX_INSECURE_ADD_CLONE_STATE_ENDPOINT.name}` environment variable is set to True. "
+                "This endpoint is insecure and should not be used in production."
+            )
             self.add_clone_state_endpoint()
 
     @staticmethod
@@ -1556,7 +1564,7 @@ async def clone_state(request: Request) -> Response:
                             found_new = True
 
             await self.state_manager.set_state(
-                new_token + "_" + new_state.get_full_name(), new_state
+                _substate_key(new_token, new_state), new_state
             )
 
             return JSONResponse(new_token)

reflex/environment.py

@@ -618,10 +618,10 @@ class EnvironmentVariables:
     REFLEX_ADD_ALL_ROUTES_ENDPOINT: EnvVar[bool] = env_var(False)
 
     # Used by flexgen to list all active connections.
-    REFLEX_ADD_ACTIVE_CONNECTIONS_ENDPOINT: EnvVar[bool] = env_var(False)
+    REFLEX_INSECURE_ADD_ACTIVE_CONNECTIONS_ENDPOINT: EnvVar[bool] = env_var(False)
 
     # Used by flexgen to clone the state of the app.
-    REFLEX_ADD_CLONE_STATE_ENDPOINT: EnvVar[bool] = env_var(False)
+    REFLEX_INSECURE_ADD_CLONE_STATE_ENDPOINT: EnvVar[bool] = env_var(False)
 
     # The address to bind the HTTP client to. You can set this to "::" to enable IPv6.
     REFLEX_HTTP_CLIENT_BIND_ADDRESS: EnvVar[str | None] = env_var(None)