jiazhizhong/higress
1
0
Fork 0
mirror of https://github.com/alibaba/higress.git synced 2026-06-26 10:45:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ai-proxy): clean client Authorization header for api-key providers (#3956)

Browse Source 
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com>
Co-authored-by: woody <yaodiwu618@gmail.com>
This commit is contained in:
DENG
2026-06-16 16:19:37 +08:00
committed by GitHub
parent d1f95f6e54
commit 7abf27a2a3
4 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
plugins/wasm-go/extensions/ai-proxy/test/claude.go
View File

@@ -97,6 +97,7 @@ func RunClaudeOnHttpRequestHeadersTests(t *testing.T) {
{":path", "/v1/chat/completions"},
{":method", "POST"},
{"Content-Type", "application/json"},
{"Authorization", "Bearer gateway-token"},
})
require.Equal(t, types.HeaderStopIteration, action)
@@ -104,9 +105,11 @@ func RunClaudeOnHttpRequestHeadersTests(t *testing.T) {
require.True(t, test.HasHeaderWithValue(requestHeaders, "x-api-key", "sk-ant-api-key-123"))
require.True(t, test.HasHeaderWithValue(requestHeaders, "anthropic-version", "2023-06-01"))
// Should NOT have Claude Code specific headers
_, hasAuth := test.GetHeaderValue(requestHeaders, "authorization")
require.False(t, hasAuth, "standard mode should not have authorization header")
// Should NOT have Claude Code specific headers or leaked Authorization header
_, hasAuthLower := test.GetHeaderValue(requestHeaders, "authorization")
require.False(t, hasAuthLower, "standard mode should not have authorization header")
_, hasAuthUpper := test.GetHeaderValue(requestHeaders, "Authorization")
require.False(t, hasAuthUpper, "standard mode should not have Authorization header")
_, hasXApp := test.GetHeaderValue(requestHeaders, "x-app")
require.False(t, hasXApp, "standard mode should not have x-app header")