SplitPdfHook raises NotImplementedError while partitioning a DOC with an embedded encrypted PDF
Personne n'a encore pris cette issue.
Évaluation
- Difficulté
- 3/5
- Temps estimé
- 1-2 jours
- Accessibilité débutants
- 58/100
- Type d'issue
- Bug
- Clarté
- Plutôt claire
- Activité
- Active
- Stack technique
- python
- Domaine
- backend-api-design
Piste de recherche
Start with src/unstructured_client/_hooks/custom/split_pdf_hook.py around before_request() and src/unstructured_client/_hooks/custom/pdf_utils.py to trace why PDF preflight runs for this DOC input and which exceptions it handles. Check the hook and PDF utility tests, then reproduce with a DOC containing an embedded PDF if a sample is available. Done when non-PDF inputs reach the API without this client-side failure and unsupported encrypted PDFs still produce a clear error.
Rédigé par le modèle d'indexation à partir du texte de l'issue.
Description
Describe the bug
When partitioning a legacy .doc Word document that contains an embedded PDF, the Python SDK's SplitPdfHook.before_request() can raise:
NotImplementedError: only Standard PDF encryption handler is available
This happens on the client, before the partition request reaches the Unstructured API. A normal .doc without the embedded PDF is successfully partitioned through the same setup. The embedded PDF opens in WPS without a password prompt, but appears to use a PDF encryption handler unsupported by pypdf.
The failure is surprising because the input being partitioned is a DOC file, not a PDF that the caller requested to split.
Environment
- Integration: self-hosted Dify 1.13.3, workflow Document Extractor node, calling a self-hosted Unstructured API.
- Failing process: Dify worker container.
- Python: 3.11 (from traceback).
unstructured-client: Dify 1.13.3'sapi/uv.lockpins 0.42.4 (the traceback'ssplit_pdf_hook.py:293matches this tag; actual installed package versions have not been separately confirmed).pypdf: Dify 1.13.3's lockfile pins 6.9.1 (actual installed version not separately confirmed).- No sample document attached because the source document is from an internal environment.
Steps to reproduce
- Prepare a legacy Word
.docwith an embedded PDF using an encryption/security handler thatpypdfdoes not support. In this report, the embedded PDF opens in WPS without requiring a password. - Upload the DOC to a Dify workflow's Document Extractor node configured to use Unstructured.
- The worker calls
unstructured.partition.api.partition_via_api(...)with the DOC content. - Observe the exception from the SDK request hook. A plain DOC without this embedded PDF works.
A standalone SDK reproduction to try with the same document:
from unstructured.partition.api import partition_via_api
elements = partition_via_api(
filename="problem.doc",
api_url="http://<unstructured-host>:8000/general/v0/general",
api_key="",
)
Actual behavior
Relevant traceback (local path prefix omitted):
unstructured_client/_hooks/sdkhooks.py:48, in before_request
out = hook.before_request(hook_ctx, request)
unstructured_client/_hooks/custom/split_pdf_hook.py:293, in before_request
pdf = pdf_utils.read_pdf(pdf_file)
unstructured_client/_hooks/custom/pdf_utils.py:42, in read_pdf
return PdfReader(pdf_file, strict=False)
pypdf/_reader.py:155, in __init__
self._handle_encryption(password)
pypdf/_reader.py:182, in _handle_encryption
self._encryption = Encryption.read(encrypt_entry, id1_entry)
pypdf/_encryption.py:1093, in read
raise NotImplementedError(
NotImplementedError: only Standard PDF encryption handler is available
In unstructured-client v0.42.4, pdf_utils.read_pdf() catches (PdfReadError, UnicodeDecodeError), but does not catch this NotImplementedError:
The calling hook is here (lines 279–293):
Expected behavior
For non-PDF inputs, PDF splitting/preflight should not abort partitioning because the payload contains an embedded/recognizable PDF structure. Ideally the SDK detects whether the top-level input is a PDF before attempting PdfReader, and lets non-PDF documents proceed to the server unchanged. For actual encrypted PDFs with unsupported handlers, a clear validation error may still be appropriate.
Possible workaround / suggested fix
The source shows the hook returns early if split_pdf_page is absent or "false", before invoking pdf_utils.read_pdf(). Passing split_pdf_page=False to partition_via_api() should therefore avoid this specific client-side traceback; we have not yet verified end-to-end parsing of the problematic document after applying it.
Could the client skip PDF preflight for non-PDF top-level files, and/or handle the NotImplementedError from pypdf more gracefully without silently accepting unsupported encrypted PDFs?
Additional context
Dify 1.13.3 calls the SDK from:
Dify 1.18.0 still pins unstructured-client==0.42.4 in its lockfile, so upgrading Dify alone has not been established as a fix.
- Langage dominant
- Python
- Étoiles
- 120
- Forks
- 22
- Merge moyen
- 1 j 23 h
- PR mergées (30 j)
- 7
Préparer son environnement
- Aucun Dockerfile ni fichier Docker Compose
- Aucun modèle de pull request
- Lire le guide de contribution
Par où commencer
- Lisez l'issue en entier, puis le guide de contribution du projet.
- Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
- Forkez le dépôt et travaillez sur une branche.
- Ouvrez une pull request qui référence le numéro de l'issue.
Autres issues de Unstructured-IO/unstructured-python-client
-
Difficulté 2/5 1-3 heures Accessibilité débutants 87/100
-
Difficulté 2/5 1-3 heures Accessibilité débutants 72/100
Unstructured-IO/unstructured-python-client#362 · 1 commentaire ·
-
bug
Difficulté 2/5 1-3 heures Accessibilité débutants 62/100
-
bug
Difficulté 3/5 1-2 jours Accessibilité débutants 45/100
-
bug
Difficulté 3/5 1-2 jours Accessibilité débutants 35/100
Toutes les issues de Unstructured-IO/unstructured-python-client
Issues similaires
-
Difficulté 2/5 1-3 heures Accessibilité débutants 66/100
cline/mcp-marketplace#3576 ·
-
Difficulté 1/5 Moins d'une heure Accessibilité débutants 90/100
griptape-ai/griptape-nodes-library-elevenlabs#30 ·
Les mainteneurs répondent en général sous 1 jour
-
docs: Release playbookOuvertedocumentation
Difficulté 2/5 1-3 heures Accessibilité débutants 76/100
awslabs/social-messaging-agent-runtime-toolkit#140 ·
Les mainteneurs répondent en général sous 1 jour
-
subtask
Difficulté 2/5 1-3 heures Accessibilité débutants 72/100
fga-eps-mds/2026.2-MeasureSoftGram-DOC#187 ·
Les mainteneurs répondent en général sous 1 jour
-
Difficulté 2/5 1-3 heures Accessibilité débutants 62/100
NSPG13/agent-bounties#1747 ·
Les mainteneurs répondent en général sous 1 jour