Files
OmniRoute/tests/unit/aihorde-key-validation.test.ts
pageragatz b9cd5ed138 feat(providers): optional AI Horde API key and live image catalog (#10542)
* feat(providers): optional AI Horde API key and live image catalog

Allow a registered Horde key on the no-auth connection and send it for
chat and image jobs. List only image models that currently have workers,
and generate through Horde's native async API.

# Conflicts:
#	open-sse/config/imageRegistry.ts
#	src/app/(dashboard)/dashboard/providers/[id]/ProviderDetailPageClient.tsx
#	src/shared/constants/providers.ts
#	src/sse/services/auth.ts

* fix(providers): validate AI Horde keys against find_user

The OpenAI-compatible /v1/models probe returns 200 for any Bearer token
on oai.aihorde.net, so Check always succeeded. Use Horde's /v2/find_user
lookup instead; an empty key still counts as the optional anonymous path.

* chore(changelog): name the AI Horde fragment for #10542

* fix(images): harden AI Horde optional-key selection and outbound fetches

- Optional-key selection now honors connection health (rate-limit cooldown
  and terminal/unavailable test status) before handing a stored key back,
  rotating to the next healthy key or falling back to the anonymous no-auth
  path instead of using an unhealthy stored key.
- Route the Horde submit/check/status/cancel and catalog calls through the
  repository's bounded outbound-fetch helper (timeout, no more bare fetch())
  and route R2 image downloads through the established bounded remote-image
  fetch (SSRF host guard, DNS-rebinding pin, streaming byte cap, redirect
  limit) instead of an unbounded fetch().
- Extend the generation deadline to cover the full request lifecycle
  (catalog freshness check, submit, polling, and image download), and add a
  regression test proving that exceeding the deadline issues a DELETE
  cancel to Horde's API rather than only timing out locally.

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

---------

Co-authored-by: pqr <pqr@soraka.ititti.es>
Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>
2026-08-18 10:51:57 -03:00

72 lines
2.3 KiB
TypeScript

import test from "node:test";
import assert from "node:assert/strict";
import { readFileSync } from "node:fs";
import { validateAiHordeProvider } from "../../src/lib/providers/validation/aihorde.ts";
function jsonResponse(status: number, body: unknown): Response {
return new Response(JSON.stringify(body), {
status,
headers: { "content-type": "application/json" },
});
}
test("empty Horde key is valid because the provider is optional", async () => {
const result = await validateAiHordeProvider({
apiKey: " ",
fetchImpl: async () => {
throw new Error("find_user must not run when no key is pasted");
},
});
assert.equal(result.valid, true);
assert.equal(result.method, "aihorde_anonymous");
});
test("junk Horde key is rejected by find_user 404", async () => {
const result = await validateAiHordeProvider({
apiKey: "junk-key-not-real",
fetchImpl: async () =>
jsonResponse(404, {
message: "User with api_key 'junk-key-not-real' not found.",
rc: "UserNotFound",
}),
});
assert.equal(result.valid, false);
assert.equal(result.error, "Invalid API key");
});
test("missing Horde key header is rejected by find_user 401", async () => {
const result = await validateAiHordeProvider({
apiKey: "not-a-real-key",
fetchImpl: async () =>
jsonResponse(401, { message: "No user matching sent API Key.", rc: "InvalidAPIKey" }),
});
assert.equal(result.valid, false);
assert.equal(result.error, "Invalid API key");
});
test("registered Horde key is accepted when find_user returns a username", async () => {
let sentKey = "";
let sentUrl = "";
const result = await validateAiHordeProvider({
apiKey: "horde-registered-key-123",
fetchImpl: async (url, init) => {
sentUrl = String(url);
sentKey = new Headers(init?.headers).get("apikey") || "";
return jsonResponse(200, { username: "tester#1234", kudos: 100 });
},
});
assert.equal(result.valid, true);
assert.equal(result.method, "aihorde_find_user");
assert.equal(sentKey, "horde-registered-key-123");
assert.match(sentUrl, /\/v2\/find_user$/);
});
test("validation.ts registers the Horde find_user specialty validator", () => {
const src = readFileSync(
new URL("../../src/lib/providers/validation.ts", import.meta.url),
"utf8"
);
assert.match(src, /aihorde:\s*validateAiHordeProvider/);
});