WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

2026-09-22 16:19:06 +08:00
commit f7fc992f57
3929 changed files with 1006607 additions and 0 deletions
@@ -0,0 +1,36 @@
+package mcp
+
+import (
+	"fmt"
+	"strings"
+
+	"github.com/Tencent/WeKnora/internal/types"
+	secutils "github.com/Tencent/WeKnora/internal/utils"
+)
+
+// ValidateServiceOutboundURLs validates every URL that the MCP transport or
+// OAuth discovery flow may contact. It is intentionally called both at
+// persistence boundaries and immediately before client construction so stale
+// or imported rows cannot bypass the current SSRF policy.
+func ValidateServiceOutboundURLs(service *types.MCPService) error {
+	if service == nil {
+		return fmt.Errorf("MCP service is required")
+	}
+	if service.URL != nil {
+		serviceURL := strings.TrimSpace(*service.URL)
+		if serviceURL != "" {
+			if err := secutils.ValidateURLForSSRF(serviceURL); err != nil {
+				return fmt.Errorf("MCP service URL failed SSRF validation: %w", err)
+			}
+		}
+	}
+	if service.AuthConfig != nil {
+		metadataURL := strings.TrimSpace(service.AuthConfig.AuthServerMetadataURL)
+		if metadataURL != "" {
+			if err := secutils.ValidateURLForSSRF(metadataURL); err != nil {
+				return fmt.Errorf("MCP OAuth metadata URL failed SSRF validation: %w", err)
+			}
+		}
+	}
+	return nil
+}