mirror of
https://github.com/OpenHands/OpenHands.git
synced 2025-12-26 05:48:36 +08:00
116 lines
3.9 KiB
Python
116 lines
3.9 KiB
Python
import uuid
|
|
|
|
from fastapi import Depends, HTTPException, Request, status
|
|
|
|
from openhands.core.logger import openhands_logger as logger
|
|
from openhands.server.shared import (
|
|
ConversationStoreImpl,
|
|
config,
|
|
conversation_manager,
|
|
)
|
|
from openhands.server.user_auth import get_user_id
|
|
from openhands.storage.conversation.conversation_store import ConversationStore
|
|
from openhands.storage.data_models.conversation_metadata import ConversationMetadata
|
|
|
|
|
|
def validate_conversation_id(conversation_id: str) -> str:
|
|
"""
|
|
Validate conversation ID format and length.
|
|
|
|
Args:
|
|
conversation_id: The conversation ID to validate
|
|
|
|
Returns:
|
|
The validated conversation ID
|
|
|
|
Raises:
|
|
HTTPException: If the conversation ID is invalid
|
|
"""
|
|
# Check length - UUID hex is 32 characters, allow some flexibility but not excessive
|
|
if len(conversation_id) > 100:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID is too long',
|
|
)
|
|
|
|
# Check for null bytes and other problematic characters
|
|
if '\x00' in conversation_id:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains invalid characters',
|
|
)
|
|
|
|
# Check for path traversal attempts
|
|
if '..' in conversation_id or '/' in conversation_id or '\\' in conversation_id:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains invalid path characters',
|
|
)
|
|
|
|
# Check for control characters and newlines
|
|
if any(ord(c) < 32 for c in conversation_id):
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains control characters',
|
|
)
|
|
|
|
return conversation_id
|
|
|
|
|
|
async def get_conversation_store(request: Request) -> ConversationStore | None:
|
|
conversation_store: ConversationStore | None = getattr(
|
|
request.state, 'conversation_store', None
|
|
)
|
|
if conversation_store:
|
|
return conversation_store
|
|
user_id = await get_user_id(request)
|
|
conversation_store = await ConversationStoreImpl.get_instance(config, user_id)
|
|
request.state.conversation_store = conversation_store
|
|
return conversation_store
|
|
|
|
|
|
async def generate_unique_conversation_id(
|
|
conversation_store: ConversationStore,
|
|
) -> str:
|
|
conversation_id = uuid.uuid4().hex
|
|
while await conversation_store.exists(conversation_id):
|
|
conversation_id = uuid.uuid4().hex
|
|
return conversation_id
|
|
|
|
|
|
async def get_conversation_metadata(
|
|
conversation_id: str,
|
|
conversation_store: ConversationStore = Depends(get_conversation_store),
|
|
) -> ConversationMetadata:
|
|
"""Get conversation metadata and validate user access without requiring an active conversation."""
|
|
try:
|
|
metadata = await conversation_store.get_metadata(conversation_id)
|
|
return metadata
|
|
except FileNotFoundError:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_404_NOT_FOUND,
|
|
detail=f'Conversation {conversation_id} not found',
|
|
)
|
|
|
|
|
|
async def get_conversation(
|
|
conversation_id: str, user_id: str | None = Depends(get_user_id)
|
|
):
|
|
"""Grabs conversation id set by middleware. Adds the conversation_id to the openapi schema."""
|
|
conversation = await conversation_manager.attach_to_conversation(
|
|
conversation_id, user_id
|
|
)
|
|
if not conversation:
|
|
logger.warning(
|
|
f'get_conversation: conversation {conversation_id} not found, attach_to_conversation returned None',
|
|
extra={'session_id': conversation_id, 'user_id': user_id},
|
|
)
|
|
raise HTTPException(
|
|
status_code=status.HTTP_404_NOT_FOUND,
|
|
detail=f'Conversation {conversation_id} not found',
|
|
)
|
|
try:
|
|
yield conversation
|
|
finally:
|
|
await conversation_manager.detach_from_conversation(conversation)
|