fix auth on websearch (#410)

Author: nsarrazin

src/lib/buildPrompt.ts

@@ -2,24 +2,42 @@ import type { BackendModel } from "./server/models";
 import type { Message } from "./types/Message";
 import { collections } from "$lib/server/database";
 import { ObjectId } from "mongodb";
+import { authCondition } from "./server/auth";
 /**
  * Convert [{user: "assistant", content: "hi"}, {user: "user", content: "hello"}] to:
  *
  * <|assistant|>hi<|endoftext|><|prompter|>hello<|endoftext|><|assistant|>
  */
 
-export async function buildPrompt(
-	messages: Pick<Message, "from" | "content">[],
-	model: BackendModel,
-	webSearchId?: string,
-	preprompt?: string
-): Promise<string> {
+interface buildPromptOptions {
+	messages: Pick<Message, "from" | "content">[];
+	model: BackendModel;
+	locals?: App.Locals;
+	webSearchId?: string;
+	preprompt?: string;
+}
+
+export async function buildPrompt({
+	messages,
+	model,
+	locals,
+	webSearchId,
+	preprompt,
+}: buildPromptOptions): Promise<string> {
 	if (webSearchId) {
 		const webSearch = await collections.webSearches.findOne({
 			_id: new ObjectId(webSearchId),
 		});
 
 		if (!webSearch) throw new Error("Web search not found");
+		if (!locals) throw new Error("User not authenticated");
+
+		const conversation = await collections.conversations.findOne({
+			_id: webSearch.convId,
+			...authCondition(locals),
+		});
+
+		if (!conversation) throw new Error("Conversation not found");
 
 		if (webSearch.summary) {
 			messages = [

src/routes/conversation/[id]/+server.ts

@@ -98,12 +98,13 @@ export async function POST({ request, fetch, locals, params }) {
 		];
 	})() satisfies Message[];
 
-	const prompt = await buildPrompt(
+	const prompt = await buildPrompt({
 		messages,
 		model,
-		web_search_id,
-		settings?.customPrompts?.[model.id]
-	);
+		webSearchId: web_search_id,
+		preprompt: settings?.customPrompts?.[model.id],
+		locals: locals,
+	});
 
 	const randomEndpoint = modelEndpoint(model);
 

src/routes/conversation/[id]/message/[messageId]/prompt/+server.ts

@@ -31,7 +31,10 @@ export async function GET({ params, locals }) {
 		throw error(404, "Conversation model not found");
 	}
 
-	const prompt = await buildPrompt(conv.messages.slice(0, messageIndex + 1), model);
+	const prompt = await buildPrompt({
+		messages: conv.messages.slice(0, messageIndex + 1),
+		model: model,
+	});
 
 	return new Response(
 		JSON.stringify(

src/routes/conversation/[id]/summarize/+server.ts

@@ -24,7 +24,10 @@ export async function POST({ params, locals }) {
 		`Please summarize the following message as a single sentence of less than 5 words:\n` +
 		firstMessage?.content;
 
-	const prompt = await buildPrompt([{ from: "user", content: userPrompt }], defaultModel);
+	const prompt = await buildPrompt({
+		messages: [{ from: "user", content: userPrompt }],
+		model: defaultModel,
+	});
 	const generated_text = await generateFromDefaultEndpoint(prompt);
 
 	if (generated_text) {

src/routes/r/[id]/message/[messageId]/prompt/+server.ts

@@ -26,7 +26,7 @@ export async function GET({ params }) {
 		throw error(404, "Conversation model not found");
 	}
 
-	const prompt = await buildPrompt(conv.messages.slice(0, messageIndex + 1), model);
+	const prompt = await buildPrompt({ messages: conv.messages.slice(0, messageIndex + 1), model });
 
 	return new Response(
 		JSON.stringify(