main.py 40 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298
  1. import asyncio
  2. import inspect
  3. import json
  4. import logging
  5. import mimetypes
  6. import os
  7. import shutil
  8. import sys
  9. import time
  10. import random
  11. from contextlib import asynccontextmanager
  12. from urllib.parse import urlencode, parse_qs, urlparse
  13. from pydantic import BaseModel
  14. from sqlalchemy import text
  15. from typing import Optional
  16. from aiocache import cached
  17. import aiohttp
  18. import requests
  19. from fastapi import (
  20. Depends,
  21. FastAPI,
  22. File,
  23. Form,
  24. HTTPException,
  25. Request,
  26. UploadFile,
  27. status,
  28. applications,
  29. BackgroundTasks,
  30. )
  31. from fastapi.openapi.docs import get_swagger_ui_html
  32. from fastapi.middleware.cors import CORSMiddleware
  33. from fastapi.responses import JSONResponse, RedirectResponse
  34. from fastapi.staticfiles import StaticFiles
  35. from starlette.exceptions import HTTPException as StarletteHTTPException
  36. from starlette.middleware.base import BaseHTTPMiddleware
  37. from starlette.middleware.sessions import SessionMiddleware
  38. from starlette.responses import Response, StreamingResponse
  39. from open_webui.socket.main import (
  40. app as socket_app,
  41. periodic_usage_pool_cleanup,
  42. )
  43. from open_webui.routers import (
  44. audio,
  45. images,
  46. ollama,
  47. openai,
  48. retrieval,
  49. pipelines,
  50. tasks,
  51. auths,
  52. channels,
  53. chats,
  54. folders,
  55. configs,
  56. groups,
  57. files,
  58. functions,
  59. memories,
  60. models,
  61. knowledge,
  62. prompts,
  63. evaluations,
  64. tools,
  65. users,
  66. utils,
  67. )
  68. from open_webui.routers.retrieval import (
  69. get_embedding_function,
  70. get_ef,
  71. get_rf,
  72. )
  73. from open_webui.internal.db import Session
  74. from open_webui.models.functions import Functions
  75. from open_webui.models.models import Models
  76. from open_webui.models.users import UserModel, Users
  77. from open_webui.config import (
  78. # Ollama
  79. ENABLE_OLLAMA_API,
  80. OLLAMA_BASE_URLS,
  81. OLLAMA_API_CONFIGS,
  82. # OpenAI
  83. ENABLE_OPENAI_API,
  84. OPENAI_API_BASE_URLS,
  85. OPENAI_API_KEYS,
  86. OPENAI_API_CONFIGS,
  87. # Direct Connections
  88. ENABLE_DIRECT_CONNECTIONS,
  89. # Code Interpreter
  90. ENABLE_CODE_INTERPRETER,
  91. CODE_INTERPRETER_ENGINE,
  92. CODE_INTERPRETER_PROMPT_TEMPLATE,
  93. CODE_INTERPRETER_JUPYTER_URL,
  94. CODE_INTERPRETER_JUPYTER_AUTH,
  95. CODE_INTERPRETER_JUPYTER_AUTH_TOKEN,
  96. CODE_INTERPRETER_JUPYTER_AUTH_PASSWORD,
  97. # Image
  98. AUTOMATIC1111_API_AUTH,
  99. AUTOMATIC1111_BASE_URL,
  100. AUTOMATIC1111_CFG_SCALE,
  101. AUTOMATIC1111_SAMPLER,
  102. AUTOMATIC1111_SCHEDULER,
  103. COMFYUI_BASE_URL,
  104. COMFYUI_API_KEY,
  105. COMFYUI_WORKFLOW,
  106. COMFYUI_WORKFLOW_NODES,
  107. ENABLE_IMAGE_GENERATION,
  108. ENABLE_IMAGE_PROMPT_GENERATION,
  109. IMAGE_GENERATION_ENGINE,
  110. IMAGE_GENERATION_MODEL,
  111. IMAGE_SIZE,
  112. IMAGE_STEPS,
  113. IMAGES_OPENAI_API_BASE_URL,
  114. IMAGES_OPENAI_API_KEY,
  115. # Audio
  116. AUDIO_STT_ENGINE,
  117. AUDIO_STT_MODEL,
  118. AUDIO_STT_OPENAI_API_BASE_URL,
  119. AUDIO_STT_OPENAI_API_KEY,
  120. AUDIO_TTS_API_KEY,
  121. AUDIO_TTS_ENGINE,
  122. AUDIO_TTS_MODEL,
  123. AUDIO_TTS_OPENAI_API_BASE_URL,
  124. AUDIO_TTS_OPENAI_API_KEY,
  125. AUDIO_TTS_SPLIT_ON,
  126. AUDIO_TTS_VOICE,
  127. AUDIO_TTS_AZURE_SPEECH_REGION,
  128. AUDIO_TTS_AZURE_SPEECH_OUTPUT_FORMAT,
  129. WHISPER_MODEL,
  130. DEEPGRAM_API_KEY,
  131. WHISPER_MODEL_AUTO_UPDATE,
  132. WHISPER_MODEL_DIR,
  133. # Retrieval
  134. RAG_TEMPLATE,
  135. DEFAULT_RAG_TEMPLATE,
  136. RAG_EMBEDDING_MODEL,
  137. RAG_EMBEDDING_MODEL_AUTO_UPDATE,
  138. RAG_EMBEDDING_MODEL_TRUST_REMOTE_CODE,
  139. RAG_RERANKING_MODEL,
  140. RAG_RERANKING_MODEL_AUTO_UPDATE,
  141. RAG_RERANKING_MODEL_TRUST_REMOTE_CODE,
  142. RAG_EMBEDDING_ENGINE,
  143. RAG_EMBEDDING_BATCH_SIZE,
  144. RAG_RELEVANCE_THRESHOLD,
  145. RAG_FILE_MAX_COUNT,
  146. RAG_FILE_MAX_SIZE,
  147. RAG_OPENAI_API_BASE_URL,
  148. RAG_OPENAI_API_KEY,
  149. RAG_OLLAMA_BASE_URL,
  150. RAG_OLLAMA_API_KEY,
  151. CHUNK_OVERLAP,
  152. CHUNK_SIZE,
  153. CONTENT_EXTRACTION_ENGINE,
  154. TIKA_SERVER_URL,
  155. RAG_TOP_K,
  156. RAG_TEXT_SPLITTER,
  157. TIKTOKEN_ENCODING_NAME,
  158. PDF_EXTRACT_IMAGES,
  159. YOUTUBE_LOADER_LANGUAGE,
  160. YOUTUBE_LOADER_PROXY_URL,
  161. # Retrieval (Web Search)
  162. RAG_WEB_SEARCH_ENGINE,
  163. RAG_WEB_SEARCH_RESULT_COUNT,
  164. RAG_WEB_SEARCH_CONCURRENT_REQUESTS,
  165. RAG_WEB_SEARCH_DOMAIN_FILTER_LIST,
  166. JINA_API_KEY,
  167. SEARCHAPI_API_KEY,
  168. SEARCHAPI_ENGINE,
  169. SERPAPI_API_KEY,
  170. SERPAPI_ENGINE,
  171. SEARXNG_QUERY_URL,
  172. SERPER_API_KEY,
  173. SERPLY_API_KEY,
  174. SERPSTACK_API_KEY,
  175. SERPSTACK_HTTPS,
  176. TAVILY_API_KEY,
  177. BING_SEARCH_V7_ENDPOINT,
  178. BING_SEARCH_V7_SUBSCRIPTION_KEY,
  179. BRAVE_SEARCH_API_KEY,
  180. EXA_API_KEY,
  181. KAGI_SEARCH_API_KEY,
  182. MOJEEK_SEARCH_API_KEY,
  183. BOCHA_SEARCH_API_KEY,
  184. GOOGLE_PSE_API_KEY,
  185. GOOGLE_PSE_ENGINE_ID,
  186. GOOGLE_DRIVE_CLIENT_ID,
  187. GOOGLE_DRIVE_API_KEY,
  188. ENABLE_RAG_HYBRID_SEARCH,
  189. ENABLE_RAG_LOCAL_WEB_FETCH,
  190. ENABLE_RAG_WEB_LOADER_SSL_VERIFICATION,
  191. ENABLE_RAG_WEB_SEARCH,
  192. ENABLE_GOOGLE_DRIVE_INTEGRATION,
  193. UPLOAD_DIR,
  194. # WebUI
  195. WEBUI_AUTH,
  196. WEBUI_NAME,
  197. WEBUI_BANNERS,
  198. WEBHOOK_URL,
  199. ADMIN_EMAIL,
  200. SHOW_ADMIN_DETAILS,
  201. JWT_EXPIRES_IN,
  202. ENABLE_SIGNUP,
  203. ENABLE_LOGIN_FORM,
  204. ENABLE_API_KEY,
  205. ENABLE_API_KEY_ENDPOINT_RESTRICTIONS,
  206. API_KEY_ALLOWED_ENDPOINTS,
  207. ENABLE_CHANNELS,
  208. ENABLE_COMMUNITY_SHARING,
  209. ENABLE_MESSAGE_RATING,
  210. ENABLE_EVALUATION_ARENA_MODELS,
  211. USER_PERMISSIONS,
  212. DEFAULT_USER_ROLE,
  213. DEFAULT_PROMPT_SUGGESTIONS,
  214. DEFAULT_MODELS,
  215. DEFAULT_ARENA_MODEL,
  216. MODEL_ORDER_LIST,
  217. EVALUATION_ARENA_MODELS,
  218. # WebUI (OAuth)
  219. ENABLE_OAUTH_ROLE_MANAGEMENT,
  220. OAUTH_ROLES_CLAIM,
  221. OAUTH_EMAIL_CLAIM,
  222. OAUTH_PICTURE_CLAIM,
  223. OAUTH_USERNAME_CLAIM,
  224. OAUTH_ALLOWED_ROLES,
  225. OAUTH_ADMIN_ROLES,
  226. # WebUI (LDAP)
  227. ENABLE_LDAP,
  228. LDAP_SERVER_LABEL,
  229. LDAP_SERVER_HOST,
  230. LDAP_SERVER_PORT,
  231. LDAP_ATTRIBUTE_FOR_MAIL,
  232. LDAP_ATTRIBUTE_FOR_USERNAME,
  233. LDAP_SEARCH_FILTERS,
  234. LDAP_SEARCH_BASE,
  235. LDAP_APP_DN,
  236. LDAP_APP_PASSWORD,
  237. LDAP_USE_TLS,
  238. LDAP_CA_CERT_FILE,
  239. LDAP_CIPHERS,
  240. # Misc
  241. ENV,
  242. CACHE_DIR,
  243. STATIC_DIR,
  244. FRONTEND_BUILD_DIR,
  245. CORS_ALLOW_ORIGIN,
  246. DEFAULT_LOCALE,
  247. OAUTH_PROVIDERS,
  248. WEBUI_URL,
  249. # Admin
  250. ENABLE_ADMIN_CHAT_ACCESS,
  251. ENABLE_ADMIN_EXPORT,
  252. # Tasks
  253. TASK_MODEL,
  254. TASK_MODEL_EXTERNAL,
  255. ENABLE_TAGS_GENERATION,
  256. ENABLE_SEARCH_QUERY_GENERATION,
  257. ENABLE_RETRIEVAL_QUERY_GENERATION,
  258. ENABLE_AUTOCOMPLETE_GENERATION,
  259. TITLE_GENERATION_PROMPT_TEMPLATE,
  260. TAGS_GENERATION_PROMPT_TEMPLATE,
  261. IMAGE_PROMPT_GENERATION_PROMPT_TEMPLATE,
  262. TOOLS_FUNCTION_CALLING_PROMPT_TEMPLATE,
  263. QUERY_GENERATION_PROMPT_TEMPLATE,
  264. AUTOCOMPLETE_GENERATION_PROMPT_TEMPLATE,
  265. AUTOCOMPLETE_GENERATION_INPUT_MAX_LENGTH,
  266. AppConfig,
  267. reset_config,
  268. )
  269. from open_webui.env import (
  270. CHANGELOG,
  271. GLOBAL_LOG_LEVEL,
  272. SAFE_MODE,
  273. SRC_LOG_LEVELS,
  274. VERSION,
  275. WEBUI_BUILD_HASH,
  276. WEBUI_SECRET_KEY,
  277. WEBUI_SESSION_COOKIE_SAME_SITE,
  278. WEBUI_SESSION_COOKIE_SECURE,
  279. WEBUI_AUTH_TRUSTED_EMAIL_HEADER,
  280. WEBUI_AUTH_TRUSTED_NAME_HEADER,
  281. ENABLE_WEBSOCKET_SUPPORT,
  282. BYPASS_MODEL_ACCESS_CONTROL,
  283. RESET_CONFIG_ON_START,
  284. OFFLINE_MODE,
  285. )
  286. from open_webui.utils.models import (
  287. get_all_models,
  288. get_all_base_models,
  289. check_model_access,
  290. )
  291. from open_webui.utils.chat import (
  292. generate_chat_completion as chat_completion_handler,
  293. chat_completed as chat_completed_handler,
  294. chat_action as chat_action_handler,
  295. )
  296. from open_webui.utils.middleware import process_chat_payload, process_chat_response
  297. from open_webui.utils.access_control import has_access
  298. from open_webui.utils.auth import (
  299. decode_token,
  300. get_admin_user,
  301. get_verified_user,
  302. )
  303. from open_webui.utils.oauth import oauth_manager
  304. from open_webui.utils.security_headers import SecurityHeadersMiddleware
  305. from open_webui.tasks import stop_task, list_tasks # Import from tasks.py
  306. if SAFE_MODE:
  307. print("SAFE MODE ENABLED")
  308. Functions.deactivate_all_functions()
  309. logging.basicConfig(stream=sys.stdout, level=GLOBAL_LOG_LEVEL)
  310. log = logging.getLogger(__name__)
  311. log.setLevel(SRC_LOG_LEVELS["MAIN"])
  312. class SPAStaticFiles(StaticFiles):
  313. async def get_response(self, path: str, scope):
  314. try:
  315. return await super().get_response(path, scope)
  316. except (HTTPException, StarletteHTTPException) as ex:
  317. if ex.status_code == 404:
  318. if path.endswith(".js"):
  319. # Return 404 for javascript files
  320. raise ex
  321. else:
  322. return await super().get_response("index.html", scope)
  323. else:
  324. raise ex
  325. print(
  326. rf"""
  327. ___ __ __ _ _ _ ___
  328. / _ \ _ __ ___ _ __ \ \ / /__| |__ | | | |_ _|
  329. | | | | '_ \ / _ \ '_ \ \ \ /\ / / _ \ '_ \| | | || |
  330. | |_| | |_) | __/ | | | \ V V / __/ |_) | |_| || |
  331. \___/| .__/ \___|_| |_| \_/\_/ \___|_.__/ \___/|___|
  332. |_|
  333. v{VERSION} - building the best open-source AI user interface.
  334. {f"Commit: {WEBUI_BUILD_HASH}" if WEBUI_BUILD_HASH != "dev-build" else ""}
  335. https://github.com/open-webui/open-webui
  336. """
  337. )
  338. @asynccontextmanager
  339. async def lifespan(app: FastAPI):
  340. if RESET_CONFIG_ON_START:
  341. reset_config()
  342. asyncio.create_task(periodic_usage_pool_cleanup())
  343. yield
  344. app = FastAPI(
  345. docs_url="/docs" if ENV == "dev" else None,
  346. openapi_url="/openapi.json" if ENV == "dev" else None,
  347. redoc_url=None,
  348. lifespan=lifespan,
  349. )
  350. app.state.config = AppConfig()
  351. ########################################
  352. #
  353. # OLLAMA
  354. #
  355. ########################################
  356. app.state.config.ENABLE_OLLAMA_API = ENABLE_OLLAMA_API
  357. app.state.config.OLLAMA_BASE_URLS = OLLAMA_BASE_URLS
  358. app.state.config.OLLAMA_API_CONFIGS = OLLAMA_API_CONFIGS
  359. app.state.OLLAMA_MODELS = {}
  360. ########################################
  361. #
  362. # OPENAI
  363. #
  364. ########################################
  365. app.state.config.ENABLE_OPENAI_API = ENABLE_OPENAI_API
  366. app.state.config.OPENAI_API_BASE_URLS = OPENAI_API_BASE_URLS
  367. app.state.config.OPENAI_API_KEYS = OPENAI_API_KEYS
  368. app.state.config.OPENAI_API_CONFIGS = OPENAI_API_CONFIGS
  369. app.state.OPENAI_MODELS = {}
  370. ########################################
  371. #
  372. # DIRECT CONNECTIONS
  373. #
  374. ########################################
  375. app.state.config.ENABLE_DIRECT_CONNECTIONS = ENABLE_DIRECT_CONNECTIONS
  376. ########################################
  377. #
  378. # WEBUI
  379. #
  380. ########################################
  381. app.state.config.WEBUI_URL = WEBUI_URL
  382. app.state.config.ENABLE_SIGNUP = ENABLE_SIGNUP
  383. app.state.config.ENABLE_LOGIN_FORM = ENABLE_LOGIN_FORM
  384. app.state.config.ENABLE_API_KEY = ENABLE_API_KEY
  385. app.state.config.ENABLE_API_KEY_ENDPOINT_RESTRICTIONS = (
  386. ENABLE_API_KEY_ENDPOINT_RESTRICTIONS
  387. )
  388. app.state.config.API_KEY_ALLOWED_ENDPOINTS = API_KEY_ALLOWED_ENDPOINTS
  389. app.state.config.JWT_EXPIRES_IN = JWT_EXPIRES_IN
  390. app.state.config.SHOW_ADMIN_DETAILS = SHOW_ADMIN_DETAILS
  391. app.state.config.ADMIN_EMAIL = ADMIN_EMAIL
  392. app.state.config.DEFAULT_MODELS = DEFAULT_MODELS
  393. app.state.config.DEFAULT_PROMPT_SUGGESTIONS = DEFAULT_PROMPT_SUGGESTIONS
  394. app.state.config.DEFAULT_USER_ROLE = DEFAULT_USER_ROLE
  395. app.state.config.USER_PERMISSIONS = USER_PERMISSIONS
  396. app.state.config.WEBHOOK_URL = WEBHOOK_URL
  397. app.state.config.BANNERS = WEBUI_BANNERS
  398. app.state.config.MODEL_ORDER_LIST = MODEL_ORDER_LIST
  399. app.state.config.ENABLE_CHANNELS = ENABLE_CHANNELS
  400. app.state.config.ENABLE_COMMUNITY_SHARING = ENABLE_COMMUNITY_SHARING
  401. app.state.config.ENABLE_MESSAGE_RATING = ENABLE_MESSAGE_RATING
  402. app.state.config.ENABLE_EVALUATION_ARENA_MODELS = ENABLE_EVALUATION_ARENA_MODELS
  403. app.state.config.EVALUATION_ARENA_MODELS = EVALUATION_ARENA_MODELS
  404. app.state.config.OAUTH_USERNAME_CLAIM = OAUTH_USERNAME_CLAIM
  405. app.state.config.OAUTH_PICTURE_CLAIM = OAUTH_PICTURE_CLAIM
  406. app.state.config.OAUTH_EMAIL_CLAIM = OAUTH_EMAIL_CLAIM
  407. app.state.config.ENABLE_OAUTH_ROLE_MANAGEMENT = ENABLE_OAUTH_ROLE_MANAGEMENT
  408. app.state.config.OAUTH_ROLES_CLAIM = OAUTH_ROLES_CLAIM
  409. app.state.config.OAUTH_ALLOWED_ROLES = OAUTH_ALLOWED_ROLES
  410. app.state.config.OAUTH_ADMIN_ROLES = OAUTH_ADMIN_ROLES
  411. app.state.config.ENABLE_LDAP = ENABLE_LDAP
  412. app.state.config.LDAP_SERVER_LABEL = LDAP_SERVER_LABEL
  413. app.state.config.LDAP_SERVER_HOST = LDAP_SERVER_HOST
  414. app.state.config.LDAP_SERVER_PORT = LDAP_SERVER_PORT
  415. app.state.config.LDAP_ATTRIBUTE_FOR_MAIL = LDAP_ATTRIBUTE_FOR_MAIL
  416. app.state.config.LDAP_ATTRIBUTE_FOR_USERNAME = LDAP_ATTRIBUTE_FOR_USERNAME
  417. app.state.config.LDAP_APP_DN = LDAP_APP_DN
  418. app.state.config.LDAP_APP_PASSWORD = LDAP_APP_PASSWORD
  419. app.state.config.LDAP_SEARCH_BASE = LDAP_SEARCH_BASE
  420. app.state.config.LDAP_SEARCH_FILTERS = LDAP_SEARCH_FILTERS
  421. app.state.config.LDAP_USE_TLS = LDAP_USE_TLS
  422. app.state.config.LDAP_CA_CERT_FILE = LDAP_CA_CERT_FILE
  423. app.state.config.LDAP_CIPHERS = LDAP_CIPHERS
  424. app.state.AUTH_TRUSTED_EMAIL_HEADER = WEBUI_AUTH_TRUSTED_EMAIL_HEADER
  425. app.state.AUTH_TRUSTED_NAME_HEADER = WEBUI_AUTH_TRUSTED_NAME_HEADER
  426. app.state.TOOLS = {}
  427. app.state.FUNCTIONS = {}
  428. ########################################
  429. #
  430. # RETRIEVAL
  431. #
  432. ########################################
  433. app.state.config.TOP_K = RAG_TOP_K
  434. app.state.config.RELEVANCE_THRESHOLD = RAG_RELEVANCE_THRESHOLD
  435. app.state.config.FILE_MAX_SIZE = RAG_FILE_MAX_SIZE
  436. app.state.config.FILE_MAX_COUNT = RAG_FILE_MAX_COUNT
  437. app.state.config.ENABLE_RAG_HYBRID_SEARCH = ENABLE_RAG_HYBRID_SEARCH
  438. app.state.config.ENABLE_RAG_WEB_LOADER_SSL_VERIFICATION = (
  439. ENABLE_RAG_WEB_LOADER_SSL_VERIFICATION
  440. )
  441. app.state.config.CONTENT_EXTRACTION_ENGINE = CONTENT_EXTRACTION_ENGINE
  442. app.state.config.TIKA_SERVER_URL = TIKA_SERVER_URL
  443. app.state.config.TEXT_SPLITTER = RAG_TEXT_SPLITTER
  444. app.state.config.TIKTOKEN_ENCODING_NAME = TIKTOKEN_ENCODING_NAME
  445. app.state.config.CHUNK_SIZE = CHUNK_SIZE
  446. app.state.config.CHUNK_OVERLAP = CHUNK_OVERLAP
  447. app.state.config.RAG_EMBEDDING_ENGINE = RAG_EMBEDDING_ENGINE
  448. app.state.config.RAG_EMBEDDING_MODEL = RAG_EMBEDDING_MODEL
  449. app.state.config.RAG_EMBEDDING_BATCH_SIZE = RAG_EMBEDDING_BATCH_SIZE
  450. app.state.config.RAG_RERANKING_MODEL = RAG_RERANKING_MODEL
  451. app.state.config.RAG_TEMPLATE = RAG_TEMPLATE
  452. app.state.config.RAG_OPENAI_API_BASE_URL = RAG_OPENAI_API_BASE_URL
  453. app.state.config.RAG_OPENAI_API_KEY = RAG_OPENAI_API_KEY
  454. app.state.config.RAG_OLLAMA_BASE_URL = RAG_OLLAMA_BASE_URL
  455. app.state.config.RAG_OLLAMA_API_KEY = RAG_OLLAMA_API_KEY
  456. app.state.config.PDF_EXTRACT_IMAGES = PDF_EXTRACT_IMAGES
  457. app.state.config.YOUTUBE_LOADER_LANGUAGE = YOUTUBE_LOADER_LANGUAGE
  458. app.state.config.YOUTUBE_LOADER_PROXY_URL = YOUTUBE_LOADER_PROXY_URL
  459. app.state.config.ENABLE_RAG_WEB_SEARCH = ENABLE_RAG_WEB_SEARCH
  460. app.state.config.RAG_WEB_SEARCH_ENGINE = RAG_WEB_SEARCH_ENGINE
  461. app.state.config.RAG_WEB_SEARCH_DOMAIN_FILTER_LIST = RAG_WEB_SEARCH_DOMAIN_FILTER_LIST
  462. app.state.config.ENABLE_GOOGLE_DRIVE_INTEGRATION = ENABLE_GOOGLE_DRIVE_INTEGRATION
  463. app.state.config.SEARXNG_QUERY_URL = SEARXNG_QUERY_URL
  464. app.state.config.GOOGLE_PSE_API_KEY = GOOGLE_PSE_API_KEY
  465. app.state.config.GOOGLE_PSE_ENGINE_ID = GOOGLE_PSE_ENGINE_ID
  466. app.state.config.BRAVE_SEARCH_API_KEY = BRAVE_SEARCH_API_KEY
  467. app.state.config.KAGI_SEARCH_API_KEY = KAGI_SEARCH_API_KEY
  468. app.state.config.MOJEEK_SEARCH_API_KEY = MOJEEK_SEARCH_API_KEY
  469. app.state.config.BOCHA_SEARCH_API_KEY = BOCHA_SEARCH_API_KEY
  470. app.state.config.SERPSTACK_API_KEY = SERPSTACK_API_KEY
  471. app.state.config.SERPSTACK_HTTPS = SERPSTACK_HTTPS
  472. app.state.config.SERPER_API_KEY = SERPER_API_KEY
  473. app.state.config.SERPLY_API_KEY = SERPLY_API_KEY
  474. app.state.config.TAVILY_API_KEY = TAVILY_API_KEY
  475. app.state.config.SEARCHAPI_API_KEY = SEARCHAPI_API_KEY
  476. app.state.config.SEARCHAPI_ENGINE = SEARCHAPI_ENGINE
  477. app.state.config.SERPAPI_API_KEY = SERPAPI_API_KEY
  478. app.state.config.SERPAPI_ENGINE = SERPAPI_ENGINE
  479. app.state.config.JINA_API_KEY = JINA_API_KEY
  480. app.state.config.BING_SEARCH_V7_ENDPOINT = BING_SEARCH_V7_ENDPOINT
  481. app.state.config.BING_SEARCH_V7_SUBSCRIPTION_KEY = BING_SEARCH_V7_SUBSCRIPTION_KEY
  482. app.state.config.EXA_API_KEY = EXA_API_KEY
  483. app.state.config.RAG_WEB_SEARCH_RESULT_COUNT = RAG_WEB_SEARCH_RESULT_COUNT
  484. app.state.config.RAG_WEB_SEARCH_CONCURRENT_REQUESTS = RAG_WEB_SEARCH_CONCURRENT_REQUESTS
  485. app.state.EMBEDDING_FUNCTION = None
  486. app.state.ef = None
  487. app.state.rf = None
  488. app.state.YOUTUBE_LOADER_TRANSLATION = None
  489. try:
  490. app.state.ef = get_ef(
  491. app.state.config.RAG_EMBEDDING_ENGINE,
  492. app.state.config.RAG_EMBEDDING_MODEL,
  493. RAG_EMBEDDING_MODEL_AUTO_UPDATE,
  494. )
  495. app.state.rf = get_rf(
  496. app.state.config.RAG_RERANKING_MODEL,
  497. RAG_RERANKING_MODEL_AUTO_UPDATE,
  498. )
  499. except Exception as e:
  500. log.error(f"Error updating models: {e}")
  501. pass
  502. app.state.EMBEDDING_FUNCTION = get_embedding_function(
  503. app.state.config.RAG_EMBEDDING_ENGINE,
  504. app.state.config.RAG_EMBEDDING_MODEL,
  505. app.state.ef,
  506. (
  507. app.state.config.RAG_OPENAI_API_BASE_URL
  508. if app.state.config.RAG_EMBEDDING_ENGINE == "openai"
  509. else app.state.config.RAG_OLLAMA_BASE_URL
  510. ),
  511. (
  512. app.state.config.RAG_OPENAI_API_KEY
  513. if app.state.config.RAG_EMBEDDING_ENGINE == "openai"
  514. else app.state.config.RAG_OLLAMA_API_KEY
  515. ),
  516. app.state.config.RAG_EMBEDDING_BATCH_SIZE,
  517. )
  518. ########################################
  519. #
  520. # CODE INTERPRETER
  521. #
  522. ########################################
  523. app.state.config.ENABLE_CODE_INTERPRETER = ENABLE_CODE_INTERPRETER
  524. app.state.config.CODE_INTERPRETER_ENGINE = CODE_INTERPRETER_ENGINE
  525. app.state.config.CODE_INTERPRETER_PROMPT_TEMPLATE = CODE_INTERPRETER_PROMPT_TEMPLATE
  526. app.state.config.CODE_INTERPRETER_JUPYTER_URL = CODE_INTERPRETER_JUPYTER_URL
  527. app.state.config.CODE_INTERPRETER_JUPYTER_AUTH = CODE_INTERPRETER_JUPYTER_AUTH
  528. app.state.config.CODE_INTERPRETER_JUPYTER_AUTH_TOKEN = (
  529. CODE_INTERPRETER_JUPYTER_AUTH_TOKEN
  530. )
  531. app.state.config.CODE_INTERPRETER_JUPYTER_AUTH_PASSWORD = (
  532. CODE_INTERPRETER_JUPYTER_AUTH_PASSWORD
  533. )
  534. ########################################
  535. #
  536. # IMAGES
  537. #
  538. ########################################
  539. app.state.config.IMAGE_GENERATION_ENGINE = IMAGE_GENERATION_ENGINE
  540. app.state.config.ENABLE_IMAGE_GENERATION = ENABLE_IMAGE_GENERATION
  541. app.state.config.ENABLE_IMAGE_PROMPT_GENERATION = ENABLE_IMAGE_PROMPT_GENERATION
  542. app.state.config.IMAGES_OPENAI_API_BASE_URL = IMAGES_OPENAI_API_BASE_URL
  543. app.state.config.IMAGES_OPENAI_API_KEY = IMAGES_OPENAI_API_KEY
  544. app.state.config.IMAGE_GENERATION_MODEL = IMAGE_GENERATION_MODEL
  545. app.state.config.AUTOMATIC1111_BASE_URL = AUTOMATIC1111_BASE_URL
  546. app.state.config.AUTOMATIC1111_API_AUTH = AUTOMATIC1111_API_AUTH
  547. app.state.config.AUTOMATIC1111_CFG_SCALE = AUTOMATIC1111_CFG_SCALE
  548. app.state.config.AUTOMATIC1111_SAMPLER = AUTOMATIC1111_SAMPLER
  549. app.state.config.AUTOMATIC1111_SCHEDULER = AUTOMATIC1111_SCHEDULER
  550. app.state.config.COMFYUI_BASE_URL = COMFYUI_BASE_URL
  551. app.state.config.COMFYUI_API_KEY = COMFYUI_API_KEY
  552. app.state.config.COMFYUI_WORKFLOW = COMFYUI_WORKFLOW
  553. app.state.config.COMFYUI_WORKFLOW_NODES = COMFYUI_WORKFLOW_NODES
  554. app.state.config.IMAGE_SIZE = IMAGE_SIZE
  555. app.state.config.IMAGE_STEPS = IMAGE_STEPS
  556. ########################################
  557. #
  558. # AUDIO
  559. #
  560. ########################################
  561. app.state.config.STT_OPENAI_API_BASE_URL = AUDIO_STT_OPENAI_API_BASE_URL
  562. app.state.config.STT_OPENAI_API_KEY = AUDIO_STT_OPENAI_API_KEY
  563. app.state.config.STT_ENGINE = AUDIO_STT_ENGINE
  564. app.state.config.STT_MODEL = AUDIO_STT_MODEL
  565. app.state.config.WHISPER_MODEL = WHISPER_MODEL
  566. app.state.config.DEEPGRAM_API_KEY = DEEPGRAM_API_KEY
  567. app.state.config.TTS_OPENAI_API_BASE_URL = AUDIO_TTS_OPENAI_API_BASE_URL
  568. app.state.config.TTS_OPENAI_API_KEY = AUDIO_TTS_OPENAI_API_KEY
  569. app.state.config.TTS_ENGINE = AUDIO_TTS_ENGINE
  570. app.state.config.TTS_MODEL = AUDIO_TTS_MODEL
  571. app.state.config.TTS_VOICE = AUDIO_TTS_VOICE
  572. app.state.config.TTS_API_KEY = AUDIO_TTS_API_KEY
  573. app.state.config.TTS_SPLIT_ON = AUDIO_TTS_SPLIT_ON
  574. app.state.config.TTS_AZURE_SPEECH_REGION = AUDIO_TTS_AZURE_SPEECH_REGION
  575. app.state.config.TTS_AZURE_SPEECH_OUTPUT_FORMAT = AUDIO_TTS_AZURE_SPEECH_OUTPUT_FORMAT
  576. app.state.faster_whisper_model = None
  577. app.state.speech_synthesiser = None
  578. app.state.speech_speaker_embeddings_dataset = None
  579. ########################################
  580. #
  581. # TASKS
  582. #
  583. ########################################
  584. app.state.config.TASK_MODEL = TASK_MODEL
  585. app.state.config.TASK_MODEL_EXTERNAL = TASK_MODEL_EXTERNAL
  586. app.state.config.ENABLE_SEARCH_QUERY_GENERATION = ENABLE_SEARCH_QUERY_GENERATION
  587. app.state.config.ENABLE_RETRIEVAL_QUERY_GENERATION = ENABLE_RETRIEVAL_QUERY_GENERATION
  588. app.state.config.ENABLE_AUTOCOMPLETE_GENERATION = ENABLE_AUTOCOMPLETE_GENERATION
  589. app.state.config.ENABLE_TAGS_GENERATION = ENABLE_TAGS_GENERATION
  590. app.state.config.TITLE_GENERATION_PROMPT_TEMPLATE = TITLE_GENERATION_PROMPT_TEMPLATE
  591. app.state.config.TAGS_GENERATION_PROMPT_TEMPLATE = TAGS_GENERATION_PROMPT_TEMPLATE
  592. app.state.config.IMAGE_PROMPT_GENERATION_PROMPT_TEMPLATE = (
  593. IMAGE_PROMPT_GENERATION_PROMPT_TEMPLATE
  594. )
  595. app.state.config.TOOLS_FUNCTION_CALLING_PROMPT_TEMPLATE = (
  596. TOOLS_FUNCTION_CALLING_PROMPT_TEMPLATE
  597. )
  598. app.state.config.QUERY_GENERATION_PROMPT_TEMPLATE = QUERY_GENERATION_PROMPT_TEMPLATE
  599. app.state.config.AUTOCOMPLETE_GENERATION_PROMPT_TEMPLATE = (
  600. AUTOCOMPLETE_GENERATION_PROMPT_TEMPLATE
  601. )
  602. app.state.config.AUTOCOMPLETE_GENERATION_INPUT_MAX_LENGTH = (
  603. AUTOCOMPLETE_GENERATION_INPUT_MAX_LENGTH
  604. )
  605. ########################################
  606. #
  607. # WEBUI
  608. #
  609. ########################################
  610. app.state.MODELS = {}
  611. class RedirectMiddleware(BaseHTTPMiddleware):
  612. async def dispatch(self, request: Request, call_next):
  613. # Check if the request is a GET request
  614. if request.method == "GET":
  615. path = request.url.path
  616. query_params = dict(parse_qs(urlparse(str(request.url)).query))
  617. # Check for the specific watch path and the presence of 'v' parameter
  618. if path.endswith("/watch") and "v" in query_params:
  619. video_id = query_params["v"][0] # Extract the first 'v' parameter
  620. encoded_video_id = urlencode({"youtube": video_id})
  621. redirect_url = f"/?{encoded_video_id}"
  622. return RedirectResponse(url=redirect_url)
  623. # Proceed with the normal flow of other requests
  624. response = await call_next(request)
  625. return response
  626. # Add the middleware to the app
  627. app.add_middleware(RedirectMiddleware)
  628. app.add_middleware(SecurityHeadersMiddleware)
  629. @app.middleware("http")
  630. async def commit_session_after_request(request: Request, call_next):
  631. response = await call_next(request)
  632. # log.debug("Commit session after request")
  633. Session.commit()
  634. return response
  635. @app.middleware("http")
  636. async def check_url(request: Request, call_next):
  637. start_time = int(time.time())
  638. request.state.enable_api_key = app.state.config.ENABLE_API_KEY
  639. response = await call_next(request)
  640. process_time = int(time.time()) - start_time
  641. response.headers["X-Process-Time"] = str(process_time)
  642. return response
  643. @app.middleware("http")
  644. async def inspect_websocket(request: Request, call_next):
  645. if (
  646. "/ws/socket.io" in request.url.path
  647. and request.query_params.get("transport") == "websocket"
  648. ):
  649. upgrade = (request.headers.get("Upgrade") or "").lower()
  650. connection = (request.headers.get("Connection") or "").lower().split(",")
  651. # Check that there's the correct headers for an upgrade, else reject the connection
  652. # This is to work around this upstream issue: https://github.com/miguelgrinberg/python-engineio/issues/367
  653. if upgrade != "websocket" or "upgrade" not in connection:
  654. return JSONResponse(
  655. status_code=status.HTTP_400_BAD_REQUEST,
  656. content={"detail": "Invalid WebSocket upgrade request"},
  657. )
  658. return await call_next(request)
  659. app.add_middleware(
  660. CORSMiddleware,
  661. allow_origins=CORS_ALLOW_ORIGIN,
  662. allow_credentials=True,
  663. allow_methods=["*"],
  664. allow_headers=["*"],
  665. )
  666. app.mount("/ws", socket_app)
  667. app.include_router(ollama.router, prefix="/ollama", tags=["ollama"])
  668. app.include_router(openai.router, prefix="/openai", tags=["openai"])
  669. app.include_router(pipelines.router, prefix="/api/v1/pipelines", tags=["pipelines"])
  670. app.include_router(tasks.router, prefix="/api/v1/tasks", tags=["tasks"])
  671. app.include_router(images.router, prefix="/api/v1/images", tags=["images"])
  672. app.include_router(audio.router, prefix="/api/v1/audio", tags=["audio"])
  673. app.include_router(retrieval.router, prefix="/api/v1/retrieval", tags=["retrieval"])
  674. app.include_router(configs.router, prefix="/api/v1/configs", tags=["configs"])
  675. app.include_router(auths.router, prefix="/api/v1/auths", tags=["auths"])
  676. app.include_router(users.router, prefix="/api/v1/users", tags=["users"])
  677. app.include_router(channels.router, prefix="/api/v1/channels", tags=["channels"])
  678. app.include_router(chats.router, prefix="/api/v1/chats", tags=["chats"])
  679. app.include_router(models.router, prefix="/api/v1/models", tags=["models"])
  680. app.include_router(knowledge.router, prefix="/api/v1/knowledge", tags=["knowledge"])
  681. app.include_router(prompts.router, prefix="/api/v1/prompts", tags=["prompts"])
  682. app.include_router(tools.router, prefix="/api/v1/tools", tags=["tools"])
  683. app.include_router(memories.router, prefix="/api/v1/memories", tags=["memories"])
  684. app.include_router(folders.router, prefix="/api/v1/folders", tags=["folders"])
  685. app.include_router(groups.router, prefix="/api/v1/groups", tags=["groups"])
  686. app.include_router(files.router, prefix="/api/v1/files", tags=["files"])
  687. app.include_router(functions.router, prefix="/api/v1/functions", tags=["functions"])
  688. app.include_router(
  689. evaluations.router, prefix="/api/v1/evaluations", tags=["evaluations"]
  690. )
  691. app.include_router(utils.router, prefix="/api/v1/utils", tags=["utils"])
  692. ##################################
  693. #
  694. # Chat Endpoints
  695. #
  696. ##################################
  697. @app.get("/api/models")
  698. async def get_models(request: Request, user=Depends(get_verified_user)):
  699. def get_filtered_models(models, user):
  700. filtered_models = []
  701. for model in models:
  702. if model.get("arena"):
  703. if has_access(
  704. user.id,
  705. type="read",
  706. access_control=model.get("info", {})
  707. .get("meta", {})
  708. .get("access_control", {}),
  709. ):
  710. filtered_models.append(model)
  711. continue
  712. model_info = Models.get_model_by_id(model["id"])
  713. if model_info:
  714. if user.id == model_info.user_id or has_access(
  715. user.id, type="read", access_control=model_info.access_control
  716. ):
  717. filtered_models.append(model)
  718. return filtered_models
  719. models = await get_all_models(request)
  720. # Filter out filter pipelines
  721. models = [
  722. model
  723. for model in models
  724. if "pipeline" not in model or model["pipeline"].get("type", None) != "filter"
  725. ]
  726. model_order_list = request.app.state.config.MODEL_ORDER_LIST
  727. if model_order_list:
  728. model_order_dict = {model_id: i for i, model_id in enumerate(model_order_list)}
  729. # Sort models by order list priority, with fallback for those not in the list
  730. models.sort(
  731. key=lambda x: (model_order_dict.get(x["id"], float("inf")), x["name"])
  732. )
  733. # Filter out models that the user does not have access to
  734. if user.role == "user" and not BYPASS_MODEL_ACCESS_CONTROL:
  735. models = get_filtered_models(models, user)
  736. log.debug(
  737. f"/api/models returned filtered models accessible to the user: {json.dumps([model['id'] for model in models])}"
  738. )
  739. return {"data": models}
  740. @app.get("/api/models/base")
  741. async def get_base_models(request: Request, user=Depends(get_admin_user)):
  742. models = await get_all_base_models(request)
  743. return {"data": models}
  744. @app.post("/api/chat/completions")
  745. async def chat_completion(
  746. request: Request,
  747. form_data: dict,
  748. user=Depends(get_verified_user),
  749. ):
  750. if not request.app.state.MODELS:
  751. await get_all_models(request)
  752. model_item = form_data.pop("model_item", {})
  753. tasks = form_data.pop("background_tasks", None)
  754. try:
  755. if not model_item.get("direct", False):
  756. model_id = form_data.get("model", None)
  757. if model_id not in request.app.state.MODELS:
  758. raise Exception("Model not found")
  759. model = request.app.state.MODELS[model_id]
  760. model_info = Models.get_model_by_id(model_id)
  761. # Check if user has access to the model
  762. if not BYPASS_MODEL_ACCESS_CONTROL and user.role == "user":
  763. try:
  764. check_model_access(user, model)
  765. except Exception as e:
  766. raise e
  767. else:
  768. model = model_item
  769. model_info = None
  770. request.state.direct = True
  771. request.state.model = model
  772. metadata = {
  773. "user_id": user.id,
  774. "chat_id": form_data.pop("chat_id", None),
  775. "message_id": form_data.pop("id", None),
  776. "session_id": form_data.pop("session_id", None),
  777. "tool_ids": form_data.get("tool_ids", None),
  778. "files": form_data.get("files", None),
  779. "features": form_data.get("features", None),
  780. "variables": form_data.get("variables", None),
  781. "model": model_info,
  782. "direct": model_item.get("direct", False),
  783. **(
  784. {"function_calling": "native"}
  785. if form_data.get("params", {}).get("function_calling") == "native"
  786. or (
  787. model_info
  788. and model_info.params.model_dump().get("function_calling")
  789. == "native"
  790. )
  791. else {}
  792. ),
  793. }
  794. request.state.metadata = metadata
  795. form_data["metadata"] = metadata
  796. form_data, metadata, events = await process_chat_payload(
  797. request, form_data, metadata, user, model
  798. )
  799. except Exception as e:
  800. log.debug(f"Error processing chat payload: {e}")
  801. raise HTTPException(
  802. status_code=status.HTTP_400_BAD_REQUEST,
  803. detail=str(e),
  804. )
  805. try:
  806. response = await chat_completion_handler(request, form_data, user)
  807. return await process_chat_response(
  808. request, response, form_data, user, events, metadata, tasks
  809. )
  810. except Exception as e:
  811. raise HTTPException(
  812. status_code=status.HTTP_400_BAD_REQUEST,
  813. detail=str(e),
  814. )
  815. # Alias for chat_completion (Legacy)
  816. generate_chat_completions = chat_completion
  817. generate_chat_completion = chat_completion
  818. @app.post("/api/chat/completed")
  819. async def chat_completed(
  820. request: Request, form_data: dict, user=Depends(get_verified_user)
  821. ):
  822. try:
  823. model_item = form_data.pop("model_item", {})
  824. if model_item.get("direct", False):
  825. request.state.direct = True
  826. request.state.model = model_item
  827. return await chat_completed_handler(request, form_data, user)
  828. except Exception as e:
  829. raise HTTPException(
  830. status_code=status.HTTP_400_BAD_REQUEST,
  831. detail=str(e),
  832. )
  833. @app.post("/api/chat/actions/{action_id}")
  834. async def chat_action(
  835. request: Request, action_id: str, form_data: dict, user=Depends(get_verified_user)
  836. ):
  837. try:
  838. model_item = form_data.pop("model_item", {})
  839. if model_item.get("direct", False):
  840. request.state.direct = True
  841. request.state.model = model_item
  842. return await chat_action_handler(request, action_id, form_data, user)
  843. except Exception as e:
  844. raise HTTPException(
  845. status_code=status.HTTP_400_BAD_REQUEST,
  846. detail=str(e),
  847. )
  848. @app.post("/api/tasks/stop/{task_id}")
  849. async def stop_task_endpoint(task_id: str, user=Depends(get_verified_user)):
  850. try:
  851. result = await stop_task(task_id) # Use the function from tasks.py
  852. return result
  853. except ValueError as e:
  854. raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(e))
  855. @app.get("/api/tasks")
  856. async def list_tasks_endpoint(user=Depends(get_verified_user)):
  857. return {"tasks": list_tasks()} # Use the function from tasks.py
  858. ##################################
  859. #
  860. # Config Endpoints
  861. #
  862. ##################################
  863. @app.get("/api/config")
  864. async def get_app_config(request: Request):
  865. user = None
  866. if "token" in request.cookies:
  867. token = request.cookies.get("token")
  868. try:
  869. data = decode_token(token)
  870. except Exception as e:
  871. log.debug(e)
  872. raise HTTPException(
  873. status_code=status.HTTP_401_UNAUTHORIZED,
  874. detail="Invalid token",
  875. )
  876. if data is not None and "id" in data:
  877. user = Users.get_user_by_id(data["id"])
  878. onboarding = False
  879. if user is None:
  880. user_count = Users.get_num_users()
  881. onboarding = user_count == 0
  882. return {
  883. **({"onboarding": True} if onboarding else {}),
  884. "status": True,
  885. "name": WEBUI_NAME,
  886. "version": VERSION,
  887. "default_locale": str(DEFAULT_LOCALE),
  888. "oauth": {
  889. "providers": {
  890. name: config.get("name", name)
  891. for name, config in OAUTH_PROVIDERS.items()
  892. }
  893. },
  894. "features": {
  895. "auth": WEBUI_AUTH,
  896. "auth_trusted_header": bool(app.state.AUTH_TRUSTED_EMAIL_HEADER),
  897. "enable_ldap": app.state.config.ENABLE_LDAP,
  898. "enable_api_key": app.state.config.ENABLE_API_KEY,
  899. "enable_signup": app.state.config.ENABLE_SIGNUP,
  900. "enable_login_form": app.state.config.ENABLE_LOGIN_FORM,
  901. "enable_websocket": ENABLE_WEBSOCKET_SUPPORT,
  902. **(
  903. {
  904. "enable_direct_connections": app.state.config.ENABLE_DIRECT_CONNECTIONS,
  905. "enable_channels": app.state.config.ENABLE_CHANNELS,
  906. "enable_web_search": app.state.config.ENABLE_RAG_WEB_SEARCH,
  907. "enable_code_interpreter": app.state.config.ENABLE_CODE_INTERPRETER,
  908. "enable_image_generation": app.state.config.ENABLE_IMAGE_GENERATION,
  909. "enable_autocomplete_generation": app.state.config.ENABLE_AUTOCOMPLETE_GENERATION,
  910. "enable_community_sharing": app.state.config.ENABLE_COMMUNITY_SHARING,
  911. "enable_message_rating": app.state.config.ENABLE_MESSAGE_RATING,
  912. "enable_admin_export": ENABLE_ADMIN_EXPORT,
  913. "enable_admin_chat_access": ENABLE_ADMIN_CHAT_ACCESS,
  914. "enable_google_drive_integration": app.state.config.ENABLE_GOOGLE_DRIVE_INTEGRATION,
  915. }
  916. if user is not None
  917. else {}
  918. ),
  919. },
  920. **(
  921. {
  922. "default_models": app.state.config.DEFAULT_MODELS,
  923. "default_prompt_suggestions": app.state.config.DEFAULT_PROMPT_SUGGESTIONS,
  924. "audio": {
  925. "tts": {
  926. "engine": app.state.config.TTS_ENGINE,
  927. "voice": app.state.config.TTS_VOICE,
  928. "split_on": app.state.config.TTS_SPLIT_ON,
  929. },
  930. "stt": {
  931. "engine": app.state.config.STT_ENGINE,
  932. },
  933. },
  934. "file": {
  935. "max_size": app.state.config.FILE_MAX_SIZE,
  936. "max_count": app.state.config.FILE_MAX_COUNT,
  937. },
  938. "permissions": {**app.state.config.USER_PERMISSIONS},
  939. "google_drive": {
  940. "client_id": GOOGLE_DRIVE_CLIENT_ID.value,
  941. "api_key": GOOGLE_DRIVE_API_KEY.value,
  942. },
  943. }
  944. if user is not None
  945. else {}
  946. ),
  947. }
  948. class UrlForm(BaseModel):
  949. url: str
  950. @app.get("/api/webhook")
  951. async def get_webhook_url(user=Depends(get_admin_user)):
  952. return {
  953. "url": app.state.config.WEBHOOK_URL,
  954. }
  955. @app.post("/api/webhook")
  956. async def update_webhook_url(form_data: UrlForm, user=Depends(get_admin_user)):
  957. app.state.config.WEBHOOK_URL = form_data.url
  958. app.state.WEBHOOK_URL = app.state.config.WEBHOOK_URL
  959. return {"url": app.state.config.WEBHOOK_URL}
  960. @app.get("/api/version")
  961. async def get_app_version():
  962. return {
  963. "version": VERSION,
  964. }
  965. @app.get("/api/version/updates")
  966. async def get_app_latest_release_version(user=Depends(get_verified_user)):
  967. if OFFLINE_MODE:
  968. log.debug(
  969. f"Offline mode is enabled, returning current version as latest version"
  970. )
  971. return {"current": VERSION, "latest": VERSION}
  972. try:
  973. timeout = aiohttp.ClientTimeout(total=1)
  974. async with aiohttp.ClientSession(timeout=timeout, trust_env=True) as session:
  975. async with session.get(
  976. "https://api.github.com/repos/open-webui/open-webui/releases/latest"
  977. ) as response:
  978. response.raise_for_status()
  979. data = await response.json()
  980. latest_version = data["tag_name"]
  981. return {"current": VERSION, "latest": latest_version[1:]}
  982. except Exception as e:
  983. log.debug(e)
  984. return {"current": VERSION, "latest": VERSION}
  985. @app.get("/api/changelog")
  986. async def get_app_changelog():
  987. return {key: CHANGELOG[key] for idx, key in enumerate(CHANGELOG) if idx < 5}
  988. ############################
  989. # OAuth Login & Callback
  990. ############################
  991. # SessionMiddleware is used by authlib for oauth
  992. if len(OAUTH_PROVIDERS) > 0:
  993. app.add_middleware(
  994. SessionMiddleware,
  995. secret_key=WEBUI_SECRET_KEY,
  996. session_cookie="oui-session",
  997. same_site=WEBUI_SESSION_COOKIE_SAME_SITE,
  998. https_only=WEBUI_SESSION_COOKIE_SECURE,
  999. )
  1000. @app.get("/oauth/{provider}/login")
  1001. async def oauth_login(provider: str, request: Request):
  1002. return await oauth_manager.handle_login(provider, request)
  1003. # OAuth login logic is as follows:
  1004. # 1. Attempt to find a user with matching subject ID, tied to the provider
  1005. # 2. If OAUTH_MERGE_ACCOUNTS_BY_EMAIL is true, find a user with the email address provided via OAuth
  1006. # - This is considered insecure in general, as OAuth providers do not always verify email addresses
  1007. # 3. If there is no user, and ENABLE_OAUTH_SIGNUP is true, create a user
  1008. # - Email addresses are considered unique, so we fail registration if the email address is already taken
  1009. @app.get("/oauth/{provider}/callback")
  1010. async def oauth_callback(provider: str, request: Request, response: Response):
  1011. return await oauth_manager.handle_callback(provider, request, response)
  1012. @app.get("/manifest.json")
  1013. async def get_manifest_json():
  1014. return {
  1015. "name": WEBUI_NAME,
  1016. "short_name": WEBUI_NAME,
  1017. "description": "Open WebUI is an open, extensible, user-friendly interface for AI that adapts to your workflow.",
  1018. "start_url": "/",
  1019. "display": "standalone",
  1020. "background_color": "#343541",
  1021. "orientation": "natural",
  1022. "icons": [
  1023. {
  1024. "src": "/static/logo.png",
  1025. "type": "image/png",
  1026. "sizes": "500x500",
  1027. "purpose": "any",
  1028. },
  1029. {
  1030. "src": "/static/logo.png",
  1031. "type": "image/png",
  1032. "sizes": "500x500",
  1033. "purpose": "maskable",
  1034. },
  1035. ],
  1036. }
  1037. @app.get("/opensearch.xml")
  1038. async def get_opensearch_xml():
  1039. xml_content = rf"""
  1040. <OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/" xmlns:moz="http://www.mozilla.org/2006/browser/search/">
  1041. <ShortName>{WEBUI_NAME}</ShortName>
  1042. <Description>Search {WEBUI_NAME}</Description>
  1043. <InputEncoding>UTF-8</InputEncoding>
  1044. <Image width="16" height="16" type="image/x-icon">{app.state.config.WEBUI_URL}/static/favicon.png</Image>
  1045. <Url type="text/html" method="get" template="{app.state.config.WEBUI_URL}/?q={"{searchTerms}"}"/>
  1046. <moz:SearchForm>{app.state.config.WEBUI_URL}</moz:SearchForm>
  1047. </OpenSearchDescription>
  1048. """
  1049. return Response(content=xml_content, media_type="application/xml")
  1050. @app.get("/health")
  1051. async def healthcheck():
  1052. return {"status": True}
  1053. @app.get("/health/db")
  1054. async def healthcheck_with_db():
  1055. Session.execute(text("SELECT 1;")).all()
  1056. return {"status": True}
  1057. app.mount("/static", StaticFiles(directory=STATIC_DIR), name="static")
  1058. app.mount("/cache", StaticFiles(directory=CACHE_DIR), name="cache")
  1059. def swagger_ui_html(*args, **kwargs):
  1060. return get_swagger_ui_html(
  1061. *args,
  1062. **kwargs,
  1063. swagger_js_url="/static/swagger-ui/swagger-ui-bundle.js",
  1064. swagger_css_url="/static/swagger-ui/swagger-ui.css",
  1065. swagger_favicon_url="/static/swagger-ui/favicon.png",
  1066. )
  1067. applications.get_swagger_ui_html = swagger_ui_html
  1068. if os.path.exists(FRONTEND_BUILD_DIR):
  1069. mimetypes.add_type("text/javascript", ".js")
  1070. app.mount(
  1071. "/",
  1072. SPAStaticFiles(directory=FRONTEND_BUILD_DIR, html=True),
  1073. name="spa-static-files",
  1074. )
  1075. else:
  1076. log.warning(
  1077. f"Frontend build directory not found at '{FRONTEND_BUILD_DIR}'. Serving API only."
  1078. )