Function validate_vertex_base_url

crates/openshell-server/src/inference.rs:461–511

(value: &str)

}

fn validate_vertex_base_url(value: &str) -> Result<String, Status> {
    let trimmed = value.trim();
    let url = url::Url::parse(trimmed).map_err(|err| {
        Status::invalid_argument(format!("Vertex AI base URL override is invalid: {err}"))
    })?;

    if url.scheme() != "https" {
        return Err(Status::invalid_argument(
            "Vertex AI base URL override must use https".to_string(),
        ));
    }
    if !url.username().is_empty() || url.password().is_some() {
        return Err(Status::invalid_argument(
            "Vertex AI base URL override must not include userinfo".to_string(),
        ));
    }
    if url.query().is_some() || url.fragment().is_some() {
        return Err(Status::invalid_argument(
            "Vertex AI base URL override must not include query or fragment components".to_string(),
        ));
    }
    if let Some(port) = url.port()
        && port != 443
    {
        return Err(Status::invalid_argument(format!(
            "Vertex AI base URL override must use port 443 when an explicit port is set, got {port}"
        )));
    }

    match url.host() {
        Some(url::Host::Domain(host)) if is_allowed_vertex_override_host(host) => {}
        Some(url::Host::Domain(host)) => {
            return Err(Status::invalid_argument(format!(
                "Vertex AI base URL override must target an official Vertex AI hostname, got {host:?}"
            )));
        }
        Some(url::Host::Ipv4(_) | url::Host::Ipv6(_)) => {
            return Err(Status::invalid_argument(format!(
                "Vertex AI base URL override must not use IP literal hosts: {}",
                url.host_str().unwrap_or("<unknown>")
            )));
        }
        None => {
            return Err(Status::invalid_argument(
                "Vertex AI base URL override must include a host".to_string(),
            ));
        }
    }

    Ok(trimmed.to_string())
}

/// Build a [`RouterResolvedRoute`] for Vertex AI without duplicating the 15-field struct.
#[allow(clippy::too_many_arguments)]