Harden auth, redaction, upload size checks, and compose token requirements

backend/app/services/model_runtime.py

@@ -2,10 +2,10 @@
 
 from dataclasses import dataclass
 from typing import Any
-from urllib.parse import urlparse, urlunparse
 
 from openai import APIConnectionError, APIError, APITimeoutError, OpenAI
 
+from app.core.config import normalize_and_validate_provider_base_url
 from app.services.app_settings import read_task_runtime_settings
 
 
@@ -36,18 +36,9 @@ class ModelTaskRuntime:
 
 
 def _normalize_base_url(raw_value: str) -> str:
-    """Normalizes provider base URL and appends /v1 for OpenAI-compatible servers."""
+    """Normalizes provider base URL and enforces SSRF protections before outbound calls."""
 
-    trimmed = raw_value.strip().rstrip("/")
-    if not trimmed:
-        return "https://api.openai.com/v1"
-
-    parsed = urlparse(trimmed)
-    path = parsed.path or ""
-    if not path.endswith("/v1"):
-        path = f"{path}/v1" if path else "/v1"
-
-    return urlunparse(parsed._replace(path=path))
+    return normalize_and_validate_provider_base_url(raw_value, resolve_dns=True)
 
 
 def _should_fallback_to_chat(error: Exception) -> bool:
@@ -137,11 +128,16 @@ def resolve_task_runtime(task_name: str) -> ModelTaskRuntime:
     if provider_type != "openai_compatible":
         raise ModelTaskError(f"unsupported_provider_type:{provider_type}")
 
+    try:
+        normalized_base_url = _normalize_base_url(str(provider_payload.get("base_url", "https://api.openai.com/v1")))
+    except ValueError as error:
+        raise ModelTaskError(f"invalid_provider_base_url:{error}") from error
+
     return ModelTaskRuntime(
         task_name=task_name,
         provider_id=str(provider_payload.get("id", "")),
         provider_type=provider_type,
-        base_url=_normalize_base_url(str(provider_payload.get("base_url", "https://api.openai.com/v1"))),
+        base_url=normalized_base_url,
         timeout_seconds=int(provider_payload.get("timeout_seconds", 45)),
         api_key=str(provider_payload.get("api_key", "")).strip() or "no-key-required",
         model=str(task_payload.get("model", "")).strip(),