presenton/servers/nextjs/app/api/user-config/route.ts

104 lines
3.3 KiB
TypeScript

import { NextResponse } from "next/server";
import fs from "fs";
import { LLMConfig } from "@/types/llm_config";
const userConfigPath = process.env.USER_CONFIG_PATH!;
const canChangeKeys = process.env.CAN_CHANGE_KEYS !== "false";
const AUTH_FIELDS = new Set([
"AUTH_USERNAME",
"AUTH_PASSWORD_HASH",
"AUTH_SECRET_KEY",
]);
function stripAuthFields(config: Record<string, unknown>) {
const sanitized = { ...config };
for (const key of AUTH_FIELDS) {
delete sanitized[key];
}
return sanitized;
}
function stripAuthFieldsFromIncoming(config: Record<string, unknown>) {
return Object.fromEntries(
Object.entries(config).filter(([key]) => !AUTH_FIELDS.has(key))
);
}
export async function GET() {
if (!canChangeKeys) {
return NextResponse.json({
error: "You are not allowed to access this resource",
status: 403,
});
}
if (!userConfigPath) {
return NextResponse.json({
error: "User config path not found",
status: 500,
});
}
if (!fs.existsSync(userConfigPath)) {
return NextResponse.json({});
}
const configData = fs.readFileSync(userConfigPath, "utf-8");
const parsedConfig = JSON.parse(configData) as Record<string, unknown>;
return NextResponse.json(stripAuthFields(parsedConfig));
}
export async function POST(request: Request) {
if (!canChangeKeys) {
return NextResponse.json({
error: "You are not allowed to access this resource",
});
}
const userConfig = stripAuthFieldsFromIncoming(
(await request.json()) as Record<string, unknown>
) as LLMConfig;
let existingConfig: LLMConfig = {};
if (fs.existsSync(userConfigPath)) {
const configData = fs.readFileSync(userConfigPath, "utf-8");
existingConfig = JSON.parse(configData);
}
const definedIncomingEntries = Object.entries(userConfig).filter(
([, value]) => value !== undefined
);
const mergedConfig: LLMConfig = {
...existingConfig,
...Object.fromEntries(definedIncomingEntries),
USE_CUSTOM_URL:
userConfig.USE_CUSTOM_URL === undefined
? existingConfig.USE_CUSTOM_URL
: userConfig.USE_CUSTOM_URL,
OPEN_WEBUI_IMAGE_URL:
userConfig.OPEN_WEBUI_IMAGE_URL || existingConfig.OPEN_WEBUI_IMAGE_URL,
OPEN_WEBUI_IMAGE_API_KEY:
userConfig.OPEN_WEBUI_IMAGE_API_KEY || existingConfig.OPEN_WEBUI_IMAGE_API_KEY,
CODEX_MODEL: userConfig.CODEX_MODEL || existingConfig.CODEX_MODEL,
CODEX_ACCESS_TOKEN: existingConfig.CODEX_ACCESS_TOKEN,
CODEX_REFRESH_TOKEN: existingConfig.CODEX_REFRESH_TOKEN,
CODEX_TOKEN_EXPIRES: existingConfig.CODEX_TOKEN_EXPIRES,
CODEX_ACCOUNT_ID: existingConfig.CODEX_ACCOUNT_ID,
CODEX_USERNAME: existingConfig.CODEX_USERNAME,
CODEX_EMAIL: existingConfig.CODEX_EMAIL,
CODEX_IS_PRO: existingConfig.CODEX_IS_PRO,
DISABLE_IMAGE_GENERATION: Object.prototype.hasOwnProperty.call(
userConfig,
"DISABLE_IMAGE_GENERATION"
)
? userConfig.DISABLE_IMAGE_GENERATION
: existingConfig.DISABLE_IMAGE_GENERATION,
DISABLE_ANONYMOUS_TRACKING: Object.prototype.hasOwnProperty.call(
userConfig,
"DISABLE_ANONYMOUS_TRACKING"
)
? userConfig.DISABLE_ANONYMOUS_TRACKING
: existingConfig.DISABLE_ANONYMOUS_TRACKING,
};
fs.writeFileSync(userConfigPath, JSON.stringify(mergedConfig));
return NextResponse.json(
stripAuthFields(mergedConfig as Record<string, unknown>)
);
}