mirror of https://github.com/docusealco/docuseal
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
82 lines
2.0 KiB
82 lines
2.0 KiB
# frozen_string_literal: true
|
|
|
|
module Mcp
|
|
class McpBaseController < ActionController::API
|
|
wrap_parameters false
|
|
|
|
before_action :authenticate_user!
|
|
before_action :verify_mcp_enabled!
|
|
check_authorization
|
|
|
|
before_action do
|
|
raise CanCan::AccessDenied unless can?(:manage, :mcp)
|
|
end
|
|
|
|
rescue_from CanCan::AccessDenied do
|
|
render_error(-32_603, 'Forbidden', status: :forbidden)
|
|
end
|
|
|
|
rescue_from ActiveRecord::RecordNotFound do
|
|
render_tool_error('Not found')
|
|
end
|
|
|
|
private
|
|
|
|
def default_url_options
|
|
Docuseal.default_url_options
|
|
end
|
|
|
|
def mcp_body
|
|
request.request_parameters
|
|
end
|
|
|
|
def mcp_params
|
|
mcp_body.dig('params', 'arguments') || {}
|
|
end
|
|
|
|
def render_result(result)
|
|
render json: { jsonrpc: '2.0', id: mcp_body['id'], result: }
|
|
end
|
|
|
|
def render_error(code, message, id: nil, status: :ok)
|
|
render json: { jsonrpc: '2.0', id:, error: { code:, message: } }, status:
|
|
end
|
|
|
|
def render_tool_result(data)
|
|
render_result(content: [{ type: 'text', text: data.to_json }])
|
|
end
|
|
|
|
def render_tool_error(message)
|
|
render_result(content: [{ type: 'text', text: message }], isError: true)
|
|
end
|
|
|
|
def authenticate_user!
|
|
render json: { error: 'Not authenticated' }, status: :unauthorized unless current_user
|
|
end
|
|
|
|
def verify_mcp_enabled!
|
|
return if Docuseal.multitenant?
|
|
|
|
return if AccountConfig.exists?(account_id: current_user.account_id,
|
|
key: AccountConfig::ENABLE_MCP_KEY,
|
|
value: true)
|
|
|
|
render json: { error: 'MCP is disabled' }, status: :forbidden
|
|
end
|
|
|
|
def current_user
|
|
@current_user ||= user_from_api_key
|
|
end
|
|
|
|
def user_from_api_key
|
|
token = request.headers['Authorization'].to_s[/\ABearer\s+(.+)\z/, 1]
|
|
|
|
return if token.blank?
|
|
|
|
sha256 = Digest::SHA256.hexdigest(token)
|
|
|
|
User.joins(:mcp_tokens).active.find_by(mcp_tokens: { sha256:, archived_at: nil })
|
|
end
|
|
end
|
|
end
|