LaPaoPao/BoosAPI
1
0
Fork 0
forked from boos/BoosAPI
Code Pull Requests 1 Activity

fix managed downstream deny-all semantics

Browse Source
This commit is contained in:
cita
2026-03-20 00:39:39 +08:00
parent 5403a946c6
commit 77d6a415d1
7 changed files with 9 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/server/routes/proxy/downstreamPolicy.ts
+1 -7
View File
@@ -1,16 +1,11 @@
import type { FastifyReply, FastifyRequest } from 'fastify';
import { getProxyAuthContext } from '../../middleware/auth.js';
import { isModelAllowedByPolicyOrAllowedRoutes, recordManagedKeyCostUsage } from '../../services/downstreamApiKeyService.js';
import {
EMPTY_DOWNSTREAM_ROUTING_POLICY,
GLOBAL_UNRESTRICTED_DOWNSTREAM_ROUTING_POLICY,
type DownstreamRoutingPolicy,
} from '../../services/downstreamPolicyTypes.js';
import { EMPTY_DOWNSTREAM_ROUTING_POLICY, type DownstreamRoutingPolicy } from '../../services/downstreamPolicyTypes.js';
export function getDownstreamRoutingPolicy(request: FastifyRequest): DownstreamRoutingPolicy {
const authContext = getProxyAuthContext(request);
if (!authContext) return EMPTY_DOWNSTREAM_ROUTING_POLICY;
if (authContext.keyId === null) return GLOBAL_UNRESTRICTED_DOWNSTREAM_ROUTING_POLICY;
return authContext.policy;
}
@@ -21,7 +16,6 @@ export async function ensureModelAllowedForDownstreamKey(
): Promise<boolean> {
const authContext = getProxyAuthContext(request);
if (!authContext) return true;
if (authContext.keyId === null) return true;
if (await isModelAllowedByPolicyOrAllowedRoutes(requestedModel, authContext.policy)) {
return true;