mirror of
https://github.com/danny-avila/LibreChat.git
synced 2026-09-05 05:59:14 +00:00
* fix: SSRF-guard speech (STT/TTS) and OCR outbound requests at connect time Speech (STT/TTS) and OCR issued outbound HTTP to operator-provided target URLs with only proxy config attached, so a target that resolves to a private, loopback, link-local, or cloud-metadata address was reachable by the server. This is the same class already guarded for the custom models fetch, Actions, avatar, MCP, and the OpenAI/Anthropic endpoint clients. Add one helper applySSRFSafeAgentIfDirect(config, url, allowedAddresses) that rejects non-http(s) or unparseable target URLs, sets maxRedirects to 0 so a redirect cannot bypass the connect-time check, and attaches createSSRFSafeAgents when no proxy or agent is already set (proxy precedence preserved). Wire it into the six speech/OCR call sites and thread each section's allowedAddresses exemption from pr-01. Scope is private/internal SSRF only. It does not restrict forwarding a credential to a public host, which is a separate egress-allowlist concern. Absent an allowedAddresses entry, private targets now fail closed, matching endpoints, actions, and MCP. Document the new fields in librechat.example.yaml with the operator warning that allowedAddresses hostnames are trusted before the private-IP check. * fix: block literal private-IP hosts and thread STT exemptions through generic uploads applySSRFSafeAgentIfDirect only attached the DNS-lookup agents, but Node skips the custom lookup for IP-literal hosts, so a literal private IP such as http://127.0.0.1 connected unchecked. Reject literal private IPs synchronously in the helper, reusing the same allowedAddresses exemption logic as the lookup path. The generic audio-upload path did not forward the section-level allowedAddresses to sttRequest, so a private STT endpoint permitted via speech.stt.allowedAddresses failed with ESSRF outside the speech route. Thread the exemption through files/audio.ts and widen the STTService type. * fix: derive effective SSRF port for literal IPs and validate OCR target before opening its stream The literal-IP precheck normalized an empty URL.port to '', so allowedAddresses exemptions on a default port (127.0.0.1:80, [::1]:443) never matched. Derive 80/443 from the scheme when the port is omitted. uploadDocumentToMistral opened the upload file stream before the SSRF check, so a blocked or malformed target threw with the descriptor still open. Run the proxy/SSRF setup before fs.createReadStream. Reword the librechat.example.yaml allowedAddresses guidance to prefer a private IP literal over a hostname, and reconcile the speech/OCR SSRF specs to assert the synchronous literal-IP block instead of driving the connect-time lookup that Node skips for IP literals. * fix: block literal private IPs before the proxy return, destroy OCR stream on failure, canonicalize IPv6 exemptions Move the literal-IP check above the proxy/agent early return so a literal private IP is rejected even when a proxy is configured; document that a forward proxy must be SSRF-enforcing. Wrap the Mistral upload post in try/finally and destroy the file stream, so an async connect-time block does not leak the descriptor. Canonicalize IP literals in normalizeAddressCandidate through the same URL serialization targets use, so IPv4-mapped and expanded IPv6 exemptions match.
520 lines
16 KiB
JavaScript
520 lines
16 KiB
JavaScript
const axios = require('axios');
|
|
const { logger } = require('@librechat/data-schemas');
|
|
const {
|
|
genAzureEndpoint,
|
|
logAxiosError,
|
|
applyAxiosProxyConfig,
|
|
resolveConfigSecret,
|
|
applySSRFSafeAgentIfDirect,
|
|
} = require('@librechat/api');
|
|
const { extractEnvVariable, TTSProviders } = require('librechat-data-provider');
|
|
const { getRandomVoiceId, createChunkProcessor, splitTextIntoChunks } = require('./streamAudio');
|
|
const { getAppConfig } = require('~/server/services/Config');
|
|
|
|
/**
|
|
* Service class for handling Text-to-Speech (TTS) operations.
|
|
* @class
|
|
*/
|
|
class TTSService {
|
|
/**
|
|
* Creates an instance of TTSService.
|
|
*/
|
|
constructor() {
|
|
this.providerStrategies = {
|
|
[TTSProviders.OPENAI]: this.openAIProvider.bind(this),
|
|
[TTSProviders.AZURE_OPENAI]: this.azureOpenAIProvider.bind(this),
|
|
[TTSProviders.ELEVENLABS]: this.elevenLabsProvider.bind(this),
|
|
[TTSProviders.LOCALAI]: this.localAIProvider.bind(this),
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Creates a singleton instance of TTSService.
|
|
* @static
|
|
* @async
|
|
* @returns {Promise<TTSService>} The TTSService instance.
|
|
* @throws {Error} If the custom config is not found.
|
|
*/
|
|
static async getInstance() {
|
|
return new TTSService();
|
|
}
|
|
|
|
/**
|
|
* Retrieves the configured TTS provider.
|
|
* @param {AppConfig | null | undefined} [appConfig] - The app configuration object.
|
|
* @returns {string} The name of the configured provider.
|
|
* @throws {Error} If no provider is set or multiple providers are set.
|
|
*/
|
|
getProvider(appConfig) {
|
|
const ttsSchema = appConfig?.speech?.tts;
|
|
if (!ttsSchema) {
|
|
throw new Error(
|
|
'No TTS schema is set. Did you configure TTS in the custom config (librechat.yaml)?',
|
|
);
|
|
}
|
|
const providers = Object.entries(ttsSchema).filter(
|
|
([key, value]) => key !== 'allowedAddresses' && Object.keys(value).length > 0,
|
|
);
|
|
|
|
if (providers.length !== 1) {
|
|
throw new Error(
|
|
providers.length > 1
|
|
? 'Multiple providers are set. Please set only one provider.'
|
|
: 'No provider is set. Please set a provider.',
|
|
);
|
|
}
|
|
return providers[0][0];
|
|
}
|
|
|
|
/**
|
|
* Selects a voice for TTS based on provider schema and request.
|
|
* @async
|
|
* @param {Object} providerSchema - The schema for the selected provider.
|
|
* @param {string} requestVoice - The requested voice.
|
|
* @returns {Promise<string>} The selected voice.
|
|
*/
|
|
async getVoice(providerSchema, requestVoice) {
|
|
const voices = providerSchema.voices.filter((voice) => voice && voice.toUpperCase() !== 'ALL');
|
|
let voice = requestVoice;
|
|
if (!voice || !voices.includes(voice) || (voice.toUpperCase() === 'ALL' && voices.length > 1)) {
|
|
voice = getRandomVoiceId(voices);
|
|
}
|
|
return voice;
|
|
}
|
|
|
|
/**
|
|
* Recursively removes undefined properties from an object.
|
|
* @param {Object} obj - The object to clean.
|
|
*/
|
|
removeUndefined(obj) {
|
|
Object.keys(obj).forEach((key) => {
|
|
if (obj[key] && typeof obj[key] === 'object') {
|
|
this.removeUndefined(obj[key]);
|
|
if (Object.keys(obj[key]).length === 0) {
|
|
delete obj[key];
|
|
}
|
|
} else if (obj[key] === undefined) {
|
|
delete obj[key];
|
|
}
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Prepares the request for OpenAI TTS provider.
|
|
* @param {Object} ttsSchema - The TTS schema for OpenAI.
|
|
* @param {string} input - The input text.
|
|
* @param {string} voice - The selected voice.
|
|
* @returns {Array} An array containing the URL, data, and headers for the request.
|
|
* @throws {Error} If the selected voice is not available.
|
|
*/
|
|
openAIProvider(ttsSchema, input, voice) {
|
|
const url = ttsSchema?.url || 'https://api.openai.com/v1/audio/speech';
|
|
|
|
if (
|
|
ttsSchema?.voices &&
|
|
ttsSchema.voices.length > 0 &&
|
|
!ttsSchema.voices.includes(voice) &&
|
|
!ttsSchema.voices.includes('ALL')
|
|
) {
|
|
throw new Error(`Voice ${voice} is not available.`);
|
|
}
|
|
|
|
const data = {
|
|
input,
|
|
model: ttsSchema?.model,
|
|
voice: ttsSchema?.voices && ttsSchema.voices.length > 0 ? voice : undefined,
|
|
backend: ttsSchema?.backend,
|
|
};
|
|
|
|
const apiKey = resolveConfigSecret(ttsSchema?.apiKey) || '';
|
|
const headers = {
|
|
'Content-Type': 'application/json',
|
|
...(apiKey && { Authorization: `Bearer ${apiKey}` }),
|
|
};
|
|
|
|
return [url, data, headers];
|
|
}
|
|
|
|
/**
|
|
* Prepares the request for Azure OpenAI TTS provider.
|
|
* @param {Object} ttsSchema - The TTS schema for Azure OpenAI.
|
|
* @param {string} input - The input text.
|
|
* @param {string} voice - The selected voice.
|
|
* @returns {Array} An array containing the URL, data, and headers for the request.
|
|
* @throws {Error} If the selected voice is not available.
|
|
*/
|
|
azureOpenAIProvider(ttsSchema, input, voice) {
|
|
const url = `${genAzureEndpoint({
|
|
azureOpenAIApiInstanceName: extractEnvVariable(ttsSchema?.instanceName),
|
|
azureOpenAIApiDeploymentName: extractEnvVariable(ttsSchema?.deploymentName),
|
|
})}/audio/speech?api-version=${extractEnvVariable(ttsSchema?.apiVersion)}`;
|
|
|
|
if (
|
|
ttsSchema?.voices &&
|
|
ttsSchema.voices.length > 0 &&
|
|
!ttsSchema.voices.includes(voice) &&
|
|
!ttsSchema.voices.includes('ALL')
|
|
) {
|
|
throw new Error(`Voice ${voice} is not available.`);
|
|
}
|
|
|
|
const data = {
|
|
model: extractEnvVariable(ttsSchema?.model),
|
|
input,
|
|
voice: ttsSchema?.voices && ttsSchema.voices.length > 0 ? voice : undefined,
|
|
};
|
|
|
|
const headers = {
|
|
'Content-Type': 'application/json',
|
|
'api-key': ttsSchema.apiKey ? resolveConfigSecret(ttsSchema.apiKey) || '' : '',
|
|
};
|
|
|
|
return [url, data, headers];
|
|
}
|
|
|
|
/**
|
|
* Prepares the request for ElevenLabs TTS provider.
|
|
* @param {Object} ttsSchema - The TTS schema for ElevenLabs.
|
|
* @param {string} input - The input text.
|
|
* @param {string} voice - The selected voice.
|
|
* @param {boolean} stream - Whether to use streaming.
|
|
* @returns {Array} An array containing the URL, data, and headers for the request.
|
|
* @throws {Error} If the selected voice is not available.
|
|
*/
|
|
elevenLabsProvider(ttsSchema, input, voice, stream) {
|
|
let url =
|
|
ttsSchema?.url ||
|
|
`https://api.elevenlabs.io/v1/text-to-speech/${voice}${stream ? '/stream' : ''}`;
|
|
|
|
if (!ttsSchema?.voices.includes(voice) && !ttsSchema?.voices.includes('ALL')) {
|
|
throw new Error(`Voice ${voice} is not available.`);
|
|
}
|
|
|
|
const data = {
|
|
model_id: ttsSchema?.model,
|
|
text: input,
|
|
voice_settings: {
|
|
similarity_boost: ttsSchema?.voice_settings?.similarity_boost,
|
|
stability: ttsSchema?.voice_settings?.stability,
|
|
style: ttsSchema?.voice_settings?.style,
|
|
use_speaker_boost: ttsSchema?.voice_settings?.use_speaker_boost,
|
|
},
|
|
pronunciation_dictionary_locators: ttsSchema?.pronunciation_dictionary_locators,
|
|
};
|
|
|
|
const apiKey = resolveConfigSecret(ttsSchema?.apiKey) || '';
|
|
const headers = {
|
|
'Content-Type': 'application/json',
|
|
...(apiKey && { 'xi-api-key': apiKey }),
|
|
Accept: 'audio/mpeg',
|
|
};
|
|
|
|
return [url, data, headers];
|
|
}
|
|
|
|
/**
|
|
* Prepares the request for LocalAI TTS provider.
|
|
* @param {Object} ttsSchema - The TTS schema for LocalAI.
|
|
* @param {string} input - The input text.
|
|
* @param {string} voice - The selected voice.
|
|
* @returns {Array} An array containing the URL, data, and headers for the request.
|
|
* @throws {Error} If the selected voice is not available.
|
|
*/
|
|
localAIProvider(ttsSchema, input, voice) {
|
|
const url = ttsSchema?.url;
|
|
|
|
if (
|
|
ttsSchema?.voices &&
|
|
ttsSchema.voices.length > 0 &&
|
|
!ttsSchema.voices.includes(voice) &&
|
|
!ttsSchema.voices.includes('ALL')
|
|
) {
|
|
throw new Error(`Voice ${voice} is not available.`);
|
|
}
|
|
|
|
const data = {
|
|
input,
|
|
model: ttsSchema?.voices && ttsSchema.voices.length > 0 ? voice : undefined,
|
|
backend: ttsSchema?.backend,
|
|
};
|
|
|
|
const apiKey = resolveConfigSecret(ttsSchema?.apiKey) || '';
|
|
const headers = {
|
|
'Content-Type': 'application/json',
|
|
...(apiKey && { Authorization: `Bearer ${apiKey}` }),
|
|
};
|
|
|
|
return [url, data, headers];
|
|
}
|
|
|
|
/**
|
|
* Sends a TTS request to the specified provider.
|
|
* @async
|
|
* @param {string} provider - The TTS provider to use.
|
|
* @param {Object} ttsSchema - The TTS schema for the provider.
|
|
* @param {Object} options - The options for the TTS request.
|
|
* @param {string} options.input - The input text.
|
|
* @param {string} options.voice - The voice to use.
|
|
* @param {boolean} [options.stream=true] - Whether to use streaming.
|
|
* @param {string[]} [allowedAddresses] - Section-level SSRF exemption list of host:port pairs.
|
|
* @returns {Promise<Object>} The axios response object.
|
|
* @throws {Error} If the provider is invalid or the request fails.
|
|
*/
|
|
async ttsRequest(provider, ttsSchema, { input, voice, stream = true }, allowedAddresses) {
|
|
const strategy = this.providerStrategies[provider];
|
|
if (!strategy) {
|
|
throw new Error('Invalid provider');
|
|
}
|
|
|
|
const [url, data, headers] = strategy.call(this, ttsSchema, input, voice, stream);
|
|
|
|
[data, headers].forEach(this.removeUndefined.bind(this));
|
|
|
|
const options = { headers, responseType: stream ? 'stream' : 'arraybuffer' };
|
|
|
|
applyAxiosProxyConfig(options, url);
|
|
applySSRFSafeAgentIfDirect(options, url, allowedAddresses);
|
|
|
|
try {
|
|
return await axios.post(url, data, options);
|
|
} catch (error) {
|
|
logAxiosError({ message: `TTS request failed for provider ${provider}:`, error });
|
|
throw error;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Processes a text-to-speech request.
|
|
* @async
|
|
* @param {ServerRequest} req - The request object.
|
|
* @param {ServerResponse} res - The response object.
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async processTextToSpeech(req, res) {
|
|
const { input, voice: requestVoice } = req.body;
|
|
|
|
if (!input) {
|
|
return res.status(400).send('Missing text in request body');
|
|
}
|
|
|
|
const appConfig =
|
|
req.config ??
|
|
(await getAppConfig({
|
|
role: req.user?.role,
|
|
userId: req.user?.id,
|
|
tenantId: req.user?.tenantId,
|
|
}));
|
|
try {
|
|
res.setHeader('Content-Type', 'audio/mpeg');
|
|
const provider = this.getProvider(appConfig);
|
|
const ttsSchema = appConfig?.speech?.tts?.[provider];
|
|
const allowedAddresses = appConfig?.speech?.tts?.allowedAddresses;
|
|
const voice = await this.getVoice(ttsSchema, requestVoice);
|
|
|
|
if (input.length < 4096) {
|
|
const response = await this.ttsRequest(
|
|
provider,
|
|
ttsSchema,
|
|
{ input, voice },
|
|
allowedAddresses,
|
|
);
|
|
response.data.pipe(res);
|
|
return;
|
|
}
|
|
|
|
const textChunks = splitTextIntoChunks(input, 1000);
|
|
|
|
for (const chunk of textChunks) {
|
|
try {
|
|
const response = await this.ttsRequest(
|
|
provider,
|
|
ttsSchema,
|
|
{
|
|
voice,
|
|
input: chunk.text,
|
|
stream: true,
|
|
},
|
|
allowedAddresses,
|
|
);
|
|
|
|
logger.debug(`[textToSpeech] user: ${req?.user?.id} | writing audio stream`);
|
|
await new Promise((resolve) => {
|
|
response.data.pipe(res, { end: chunk.isFinished });
|
|
response.data.on('end', resolve);
|
|
});
|
|
|
|
if (chunk.isFinished) {
|
|
break;
|
|
}
|
|
} catch (innerError) {
|
|
logAxiosError({
|
|
message: `[TTS] Error processing manual update for chunk: ${chunk?.text?.substring(0, 50)}...`,
|
|
error: innerError,
|
|
});
|
|
if (!res.headersSent) {
|
|
return res.status(500).end();
|
|
}
|
|
return;
|
|
}
|
|
}
|
|
|
|
if (!res.headersSent) {
|
|
res.end();
|
|
}
|
|
} catch (error) {
|
|
logAxiosError({ message: '[TTS] Error creating the audio stream:', error });
|
|
if (!res.headersSent) {
|
|
return res.status(500).send('An error occurred');
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Streams audio data from the TTS provider.
|
|
* @async
|
|
* @param {ServerRequest} req - The request object.
|
|
* @param {ServerResponse} res - The response object.
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async streamAudio(req, res) {
|
|
res.setHeader('Content-Type', 'audio/mpeg');
|
|
const appConfig =
|
|
req.config ??
|
|
(await getAppConfig({
|
|
role: req.user?.role,
|
|
userId: req.user?.id,
|
|
tenantId: req.user?.tenantId,
|
|
}));
|
|
const provider = this.getProvider(appConfig);
|
|
const ttsSchema = appConfig?.speech?.tts?.[provider];
|
|
const allowedAddresses = appConfig?.speech?.tts?.allowedAddresses;
|
|
const voice = await this.getVoice(ttsSchema, req.body.voice);
|
|
|
|
let shouldContinue = true;
|
|
|
|
req.on('close', () => {
|
|
logger.warn('[streamAudio] Audio Stream Request closed by client');
|
|
shouldContinue = false;
|
|
});
|
|
|
|
const processChunks = createChunkProcessor(req.user.id, req.body.messageId);
|
|
|
|
try {
|
|
while (shouldContinue) {
|
|
const updates = await processChunks();
|
|
if (typeof updates === 'string') {
|
|
logger.error(`Error processing audio stream updates: ${updates}`);
|
|
return res.status(500).end();
|
|
}
|
|
|
|
if (updates.length === 0) {
|
|
await new Promise((resolve) => setTimeout(resolve, 1250));
|
|
continue;
|
|
}
|
|
|
|
for (const update of updates) {
|
|
try {
|
|
const response = await this.ttsRequest(
|
|
provider,
|
|
ttsSchema,
|
|
{
|
|
voice,
|
|
input: update.text,
|
|
stream: true,
|
|
},
|
|
allowedAddresses,
|
|
);
|
|
|
|
if (!shouldContinue) {
|
|
break;
|
|
}
|
|
|
|
logger.debug(`[streamAudio] user: ${req?.user?.id} | writing audio stream`);
|
|
await new Promise((resolve) => {
|
|
response.data.pipe(res, { end: update.isFinished });
|
|
response.data.on('end', resolve);
|
|
});
|
|
|
|
if (update.isFinished) {
|
|
shouldContinue = false;
|
|
break;
|
|
}
|
|
} catch (innerError) {
|
|
logAxiosError({
|
|
message: `[TTS] Error processing audio stream update: ${update?.text?.substring(0, 50)}...`,
|
|
error: innerError,
|
|
});
|
|
if (!res.headersSent) {
|
|
return res.status(500).end();
|
|
}
|
|
return;
|
|
}
|
|
}
|
|
|
|
if (!shouldContinue) {
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!res.headersSent) {
|
|
res.end();
|
|
}
|
|
} catch (error) {
|
|
logAxiosError({ message: '[TTS] Failed to fetch audio:', error });
|
|
if (!res.headersSent) {
|
|
res.status(500).end();
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Factory function to create a TTSService instance.
|
|
* @async
|
|
* @returns {Promise<TTSService>} A promise that resolves to a TTSService instance.
|
|
*/
|
|
async function createTTSService() {
|
|
return TTSService.getInstance();
|
|
}
|
|
|
|
/**
|
|
* Wrapper function for text-to-speech processing.
|
|
* @async
|
|
* @param {ServerRequest} req - The request object.
|
|
* @param {ServerResponse} res - The response object.
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async function textToSpeech(req, res) {
|
|
const ttsService = await createTTSService();
|
|
await ttsService.processTextToSpeech(req, res);
|
|
}
|
|
|
|
/**
|
|
* Wrapper function for audio streaming.
|
|
* @async
|
|
* @param {Object} req - The request object.
|
|
* @param {Object} res - The response object.
|
|
* @returns {Promise<void>}
|
|
*/
|
|
async function streamAudio(req, res) {
|
|
const ttsService = await createTTSService();
|
|
await ttsService.streamAudio(req, res);
|
|
}
|
|
|
|
/**
|
|
* Wrapper function to get the configured TTS provider.
|
|
* @async
|
|
* @param {AppConfig | null | undefined} appConfig - The app configuration object.
|
|
* @returns {Promise<string>} A promise that resolves to the name of the configured provider.
|
|
*/
|
|
async function getProvider(appConfig) {
|
|
const ttsService = await createTTSService();
|
|
return ttsService.getProvider(appConfig);
|
|
}
|
|
|
|
module.exports = {
|
|
textToSpeech,
|
|
streamAudio,
|
|
getProvider,
|
|
TTSService,
|
|
};
|