mirror of
https://github.com/All-Hands-AI/OpenHands.git
synced 2026-04-29 03:00:45 -04:00
89 lines
3.4 KiB
Python
89 lines
3.4 KiB
Python
# IMPORTANT: LEGACY V0 CODE - Deprecated since version 1.0.0, scheduled for removal April 1, 2026
|
|
# This file is part of the legacy (V0) implementation of OpenHands and will be removed soon as we complete the migration to V1.
|
|
# OpenHands V1 uses the Software Agent SDK for the agentic core and runs a new application server. Please refer to:
|
|
# - V1 agentic core (SDK): https://github.com/OpenHands/software-agent-sdk
|
|
# - V1 application server (in this repo): openhands/app_server/
|
|
# Unless you are working on deprecation, please avoid extending this legacy file and consult the V1 codepaths above.
|
|
# Tag: Legacy-V0
|
|
# This module belongs to the old V0 web server. The V1 application server lives under openhands/app_server/.
|
|
from fastapi import Depends, HTTPException, Request, status
|
|
|
|
from openhands.server.shared import (
|
|
ConversationStoreImpl,
|
|
config,
|
|
)
|
|
from openhands.server.user_auth import get_user_id
|
|
from openhands.storage.conversation.conversation_store import ConversationStore
|
|
from openhands.storage.data_models.conversation_metadata import ConversationMetadata
|
|
|
|
|
|
def validate_conversation_id(conversation_id: str) -> str:
|
|
"""
|
|
Validate conversation ID format and length.
|
|
|
|
Args:
|
|
conversation_id: The conversation ID to validate
|
|
|
|
Returns:
|
|
The validated conversation ID
|
|
|
|
Raises:
|
|
HTTPException: If the conversation ID is invalid
|
|
"""
|
|
# Check length - UUID hex is 32 characters, allow some flexibility but not excessive
|
|
if len(conversation_id) > 100:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID is too long',
|
|
)
|
|
|
|
# Check for null bytes and other problematic characters
|
|
if '\x00' in conversation_id:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains invalid characters',
|
|
)
|
|
|
|
# Check for path traversal attempts
|
|
if '..' in conversation_id or '/' in conversation_id or '\\' in conversation_id:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains invalid path characters',
|
|
)
|
|
|
|
# Check for control characters and newlines
|
|
if any(ord(c) < 32 for c in conversation_id):
|
|
raise HTTPException(
|
|
status_code=status.HTTP_400_BAD_REQUEST,
|
|
detail='Conversation ID contains control characters',
|
|
)
|
|
|
|
return conversation_id
|
|
|
|
|
|
async def get_conversation_store(request: Request) -> ConversationStore | None:
|
|
conversation_store: ConversationStore | None = getattr(
|
|
request.state, 'conversation_store', None
|
|
)
|
|
if conversation_store:
|
|
return conversation_store
|
|
user_id = await get_user_id(request)
|
|
conversation_store = await ConversationStoreImpl.get_instance(config, user_id)
|
|
request.state.conversation_store = conversation_store
|
|
return conversation_store
|
|
|
|
|
|
async def get_conversation_metadata(
|
|
conversation_id: str,
|
|
conversation_store: ConversationStore = Depends(get_conversation_store),
|
|
) -> ConversationMetadata:
|
|
"""Get conversation metadata and validate user access without requiring an active conversation."""
|
|
try:
|
|
metadata = await conversation_store.get_metadata(conversation_id)
|
|
return metadata
|
|
except FileNotFoundError:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_404_NOT_FOUND,
|
|
detail=f'Conversation {conversation_id} not found',
|
|
)
|