Function _resolve_pref_url

web/pgadmin/llm/utils.py:288–314

Resolve an API URL preference against the allowlist. - User preference set and allowed: return it. - User preference set but rejected: log a warning and return '' WITHOUT falling back to the admin default. Silent substitution hides the rejection and routes the user's reques

(pref_name, config_default)

def _resolve_pref_url(pref_name, config_default):
    """
    Resolve an API URL preference against the allowlist.

    - User preference set and allowed: return it.
    - User preference set but rejected: log a warning and return ''
      WITHOUT falling back to the admin default. Silent substitution
      hides the rejection and routes the user's request to a
      different provider (issue #9936).
    - No user preference: return the admin's trusted config URL.
    """
    pref_url = _get_preference_value(pref_name)
    if pref_url:
        if validate_api_url(pref_url):
            return pref_url
        try:
            from flask import current_app
            current_app.logger.warning(
                "LLM API URL preference '%s'=%r is not in "
                "ALLOWED_LLM_API_URLS; ignoring. Add it to the "
                "allowlist in config_local.py to permit this URL.",
                pref_name, pref_url
            )
        except Exception:
            pass
        return ''
    return config_default or ''


def is_pref_api_url_rejected(pref_name):