9router

WildDragonLLC/9router

Fork 0

Commit graph

Author	SHA1	Message	Date
zmf	8a527fec91	fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction - resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search) - fresh-install remote login with default password returns 403 without issuing a JWT - /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads - declare chalk and prop-types in package.json (used but previously undeclared)	2026-08-13 11:50:25 +07:00
decolua	9be6588cc8	chore: drop source-attribution comments from provider code Remove "Ported from OmniRoute" and cockpit-tools attribution comments. User-Agent strings and README/landing credits are left intact. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-29 21:05:23 +07:00
decolua	8f81363675	Enhance token refresh functionality across multiple executors - Updated refreshCredentials methods in various executors (Antigravity, Base, Default, Github, Kiro) to accept optional proxyOptions for improved proxy handling. - Modified token refresh logic to utilize proxy-aware fetch for better network management. - Enhanced usage retrieval functions to support proxy options, ensuring seamless integration with proxy configurations. - Updated ModelSelectModal and ProviderInfoCard components to incorporate kind filtering for improved user experience in model selection. - Added validation for API keys in the provider validation route, including support for webSearch/webFetch providers.	2026-04-28 17:28:57 +07:00

Author

SHA1

Message

Date

zmf

8a527fec91

fix(security): SSRF guard on search baseUrl, default-password remote login, and request-details redaction

- resolveBaseUrl() rejects client-supplied non-public baseUrls via assertPublicUrl (SSRF guard on /v1/search)
- fresh-install remote login with default password returns 403 without issuing a JWT
- /api/usage/request-details redacts request/providerRequest/providerResponse/response payloads
- declare chalk and prop-types in package.json (used but previously undeclared)

2026-08-13 11:50:25 +07:00

decolua

9be6588cc8

chore: drop source-attribution comments from provider code

Remove "Ported from OmniRoute" and cockpit-tools attribution comments.
User-Agent strings and README/landing credits are left intact.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-29 21:05:23 +07:00

decolua

8f81363675

Enhance token refresh functionality across multiple executors

- Updated refreshCredentials methods in various executors (Antigravity, Base, Default, Github, Kiro) to accept optional proxyOptions for improved proxy handling.
- Modified token refresh logic to utilize proxy-aware fetch for better network management.
- Enhanced usage retrieval functions to support proxy options, ensuring seamless integration with proxy configurations.
- Updated ModelSelectModal and ProviderInfoCard components to incorporate kind filtering for improved user experience in model selection.
- Added validation for API keys in the provider validation route, including support for webSearch/webFetch providers.

2026-04-28 17:28:57 +07:00

3 commits