api_tool.py 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316
  1. import json
  2. from json import dumps
  3. from os import getenv
  4. from typing import Any, Union
  5. from urllib.parse import urlencode
  6. import httpx
  7. import requests
  8. import core.helper.ssrf_proxy as ssrf_proxy
  9. from core.tools.entities.tool_bundle import ApiBasedToolBundle
  10. from core.tools.entities.tool_entities import ToolInvokeMessage, ToolProviderType
  11. from core.tools.entities.user_entities import UserToolProvider
  12. from core.tools.errors import ToolInvokeError, ToolParameterValidationError, ToolProviderCredentialValidationError
  13. from core.tools.tool.tool import Tool
  14. API_TOOL_DEFAULT_TIMEOUT = (
  15. int(getenv('API_TOOL_DEFAULT_CONNECT_TIMEOUT', '10')),
  16. int(getenv('API_TOOL_DEFAULT_READ_TIMEOUT', '60'))
  17. )
  18. class ApiTool(Tool):
  19. api_bundle: ApiBasedToolBundle
  20. """
  21. Api tool
  22. """
  23. def fork_tool_runtime(self, meta: dict[str, Any]) -> 'Tool':
  24. """
  25. fork a new tool with meta data
  26. :param meta: the meta data of a tool call processing, tenant_id is required
  27. :return: the new tool
  28. """
  29. return self.__class__(
  30. identity=self.identity.copy() if self.identity else None,
  31. parameters=self.parameters.copy() if self.parameters else None,
  32. description=self.description.copy() if self.description else None,
  33. api_bundle=self.api_bundle.copy() if self.api_bundle else None,
  34. runtime=Tool.Runtime(**meta)
  35. )
  36. def validate_credentials(self, credentials: dict[str, Any], parameters: dict[str, Any], format_only: bool = False) -> str:
  37. """
  38. validate the credentials for Api tool
  39. """
  40. # assemble validate request and request parameters
  41. headers = self.assembling_request(parameters)
  42. if format_only:
  43. return
  44. response = self.do_http_request(self.api_bundle.server_url, self.api_bundle.method, headers, parameters)
  45. # validate response
  46. return self.validate_and_parse_response(response)
  47. def tool_provider_type(self) -> ToolProviderType:
  48. return UserToolProvider.ProviderType.API
  49. def assembling_request(self, parameters: dict[str, Any]) -> dict[str, Any]:
  50. headers = {}
  51. credentials = self.runtime.credentials or {}
  52. if 'auth_type' not in credentials:
  53. raise ToolProviderCredentialValidationError('Missing auth_type')
  54. if credentials['auth_type'] == 'api_key':
  55. api_key_header = 'api_key'
  56. if 'api_key_header' in credentials:
  57. api_key_header = credentials['api_key_header']
  58. if 'api_key_value' not in credentials:
  59. raise ToolProviderCredentialValidationError('Missing api_key_value')
  60. elif not isinstance(credentials['api_key_value'], str):
  61. raise ToolProviderCredentialValidationError('api_key_value must be a string')
  62. if 'api_key_header_prefix' in credentials:
  63. api_key_header_prefix = credentials['api_key_header_prefix']
  64. if api_key_header_prefix == 'basic' and credentials['api_key_value']:
  65. credentials['api_key_value'] = f'Basic {credentials["api_key_value"]}'
  66. elif api_key_header_prefix == 'bearer' and credentials['api_key_value']:
  67. credentials['api_key_value'] = f'Bearer {credentials["api_key_value"]}'
  68. elif api_key_header_prefix == 'custom':
  69. pass
  70. headers[api_key_header] = credentials['api_key_value']
  71. needed_parameters = [parameter for parameter in self.api_bundle.parameters if parameter.required]
  72. for parameter in needed_parameters:
  73. if parameter.required and parameter.name not in parameters:
  74. raise ToolParameterValidationError(f"Missing required parameter {parameter.name}")
  75. if parameter.default is not None and parameter.name not in parameters:
  76. parameters[parameter.name] = parameter.default
  77. return headers
  78. def validate_and_parse_response(self, response: Union[httpx.Response, requests.Response]) -> str:
  79. """
  80. validate the response
  81. """
  82. if isinstance(response, httpx.Response):
  83. if response.status_code >= 400:
  84. raise ToolInvokeError(f"Request failed with status code {response.status_code} and {response.text}")
  85. if not response.content:
  86. return 'Empty response from the tool, please check your parameters and try again.'
  87. try:
  88. response = response.json()
  89. try:
  90. return json.dumps(response, ensure_ascii=False)
  91. except Exception as e:
  92. return json.dumps(response)
  93. except Exception as e:
  94. return response.text
  95. elif isinstance(response, requests.Response):
  96. if not response.ok:
  97. raise ToolInvokeError(f"Request failed with status code {response.status_code} and {response.text}")
  98. if not response.content:
  99. return 'Empty response from the tool, please check your parameters and try again.'
  100. try:
  101. response = response.json()
  102. try:
  103. return json.dumps(response, ensure_ascii=False)
  104. except Exception as e:
  105. return json.dumps(response)
  106. except Exception as e:
  107. return response.text
  108. else:
  109. raise ValueError(f'Invalid response type {type(response)}')
  110. def do_http_request(self, url: str, method: str, headers: dict[str, Any], parameters: dict[str, Any]) -> httpx.Response:
  111. """
  112. do http request depending on api bundle
  113. """
  114. method = method.lower()
  115. params = {}
  116. path_params = {}
  117. body = {}
  118. cookies = {}
  119. # check parameters
  120. for parameter in self.api_bundle.openapi.get('parameters', []):
  121. if parameter['in'] == 'path':
  122. value = ''
  123. if parameter['name'] in parameters:
  124. value = parameters[parameter['name']]
  125. elif parameter['required']:
  126. raise ToolParameterValidationError(f"Missing required parameter {parameter['name']}")
  127. else:
  128. value = (parameter.get('schema', {}) or {}).get('default', '')
  129. path_params[parameter['name']] = value
  130. elif parameter['in'] == 'query':
  131. value = ''
  132. if parameter['name'] in parameters:
  133. value = parameters[parameter['name']]
  134. elif parameter.get('required', False):
  135. raise ToolParameterValidationError(f"Missing required parameter {parameter['name']}")
  136. else:
  137. value = (parameter.get('schema', {}) or {}).get('default', '')
  138. params[parameter['name']] = value
  139. elif parameter['in'] == 'cookie':
  140. value = ''
  141. if parameter['name'] in parameters:
  142. value = parameters[parameter['name']]
  143. elif parameter.get('required', False):
  144. raise ToolParameterValidationError(f"Missing required parameter {parameter['name']}")
  145. else:
  146. value = (parameter.get('schema', {}) or {}).get('default', '')
  147. cookies[parameter['name']] = value
  148. elif parameter['in'] == 'header':
  149. value = ''
  150. if parameter['name'] in parameters:
  151. value = parameters[parameter['name']]
  152. elif parameter.get('required', False):
  153. raise ToolParameterValidationError(f"Missing required parameter {parameter['name']}")
  154. else:
  155. value = (parameter.get('schema', {}) or {}).get('default', '')
  156. headers[parameter['name']] = value
  157. # check if there is a request body and handle it
  158. if 'requestBody' in self.api_bundle.openapi and self.api_bundle.openapi['requestBody'] is not None:
  159. # handle json request body
  160. if 'content' in self.api_bundle.openapi['requestBody']:
  161. for content_type in self.api_bundle.openapi['requestBody']['content']:
  162. headers['Content-Type'] = content_type
  163. body_schema = self.api_bundle.openapi['requestBody']['content'][content_type]['schema']
  164. required = body_schema['required'] if 'required' in body_schema else []
  165. properties = body_schema['properties'] if 'properties' in body_schema else {}
  166. for name, property in properties.items():
  167. if name in parameters:
  168. # convert type
  169. body[name] = self._convert_body_property_type(property, parameters[name])
  170. elif name in required:
  171. raise ToolParameterValidationError(
  172. f"Missing required parameter {name} in operation {self.api_bundle.operation_id}"
  173. )
  174. elif 'default' in property:
  175. body[name] = property['default']
  176. else:
  177. body[name] = None
  178. break
  179. # replace path parameters
  180. for name, value in path_params.items():
  181. url = url.replace(f'{{{name}}}', f'{value}')
  182. # parse http body data if needed, for GET/HEAD/OPTIONS/TRACE, the body is ignored
  183. if 'Content-Type' in headers:
  184. if headers['Content-Type'] == 'application/json':
  185. body = dumps(body)
  186. elif headers['Content-Type'] == 'application/x-www-form-urlencoded':
  187. body = urlencode(body)
  188. else:
  189. body = body
  190. # do http request
  191. if method == 'get':
  192. response = ssrf_proxy.get(url, params=params, headers=headers, cookies=cookies, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  193. elif method == 'post':
  194. response = ssrf_proxy.post(url, params=params, headers=headers, cookies=cookies, data=body, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  195. elif method == 'put':
  196. response = ssrf_proxy.put(url, params=params, headers=headers, cookies=cookies, data=body, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  197. elif method == 'delete':
  198. response = ssrf_proxy.delete(url, params=params, headers=headers, cookies=cookies, data=body, timeout=API_TOOL_DEFAULT_TIMEOUT, allow_redirects=True)
  199. elif method == 'patch':
  200. response = ssrf_proxy.patch(url, params=params, headers=headers, cookies=cookies, data=body, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  201. elif method == 'head':
  202. response = ssrf_proxy.head(url, params=params, headers=headers, cookies=cookies, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  203. elif method == 'options':
  204. response = ssrf_proxy.options(url, params=params, headers=headers, cookies=cookies, timeout=API_TOOL_DEFAULT_TIMEOUT, follow_redirects=True)
  205. else:
  206. raise ValueError(f'Invalid http method {method}')
  207. return response
  208. def _convert_body_property_any_of(self, property: dict[str, Any], value: Any, any_of: list[dict[str, Any]], max_recursive=10) -> Any:
  209. if max_recursive <= 0:
  210. raise Exception("Max recursion depth reached")
  211. for option in any_of or []:
  212. try:
  213. if 'type' in option:
  214. # Attempt to convert the value based on the type.
  215. if option['type'] == 'integer' or option['type'] == 'int':
  216. return int(value)
  217. elif option['type'] == 'number':
  218. if '.' in str(value):
  219. return float(value)
  220. else:
  221. return int(value)
  222. elif option['type'] == 'string':
  223. return str(value)
  224. elif option['type'] == 'boolean':
  225. if str(value).lower() in ['true', '1']:
  226. return True
  227. elif str(value).lower() in ['false', '0']:
  228. return False
  229. else:
  230. continue # Not a boolean, try next option
  231. elif option['type'] == 'null' and not value:
  232. return None
  233. else:
  234. continue # Unsupported type, try next option
  235. elif 'anyOf' in option and isinstance(option['anyOf'], list):
  236. # Recursive call to handle nested anyOf
  237. return self._convert_body_property_any_of(property, value, option['anyOf'], max_recursive - 1)
  238. except ValueError:
  239. continue # Conversion failed, try next option
  240. # If no option succeeded, you might want to return the value as is or raise an error
  241. return value # or raise ValueError(f"Cannot convert value '{value}' to any specified type in anyOf")
  242. def _convert_body_property_type(self, property: dict[str, Any], value: Any) -> Any:
  243. try:
  244. if 'type' in property:
  245. if property['type'] == 'integer' or property['type'] == 'int':
  246. return int(value)
  247. elif property['type'] == 'number':
  248. # check if it is a float
  249. if '.' in value:
  250. return float(value)
  251. else:
  252. return int(value)
  253. elif property['type'] == 'string':
  254. return str(value)
  255. elif property['type'] == 'boolean':
  256. return bool(value)
  257. elif property['type'] == 'null':
  258. if value is None:
  259. return None
  260. else:
  261. raise ValueError(f"Invalid type {property['type']} for property {property}")
  262. elif 'anyOf' in property and isinstance(property['anyOf'], list):
  263. return self._convert_body_property_any_of(property, value, property['anyOf'])
  264. except ValueError as e:
  265. return value
  266. def _invoke(self, user_id: str, tool_parameters: dict[str, Any]) -> ToolInvokeMessage | list[ToolInvokeMessage]:
  267. """
  268. invoke http request
  269. """
  270. # assemble request
  271. headers = self.assembling_request(tool_parameters)
  272. # do http request
  273. response = self.do_http_request(self.api_bundle.server_url, self.api_bundle.method, headers, tool_parameters)
  274. # validate response
  275. response = self.validate_and_parse_response(response)
  276. # assemble invoke message
  277. return self.create_text_message(response)