shanglei 07da0c8090 feat(sidecar): support remote HTTPS sidecar addresses ...

Relax the auth-sidecar proxy address policy so a remote central sidecar
reachable over TLS can be used, while keeping existing same-host plaintext
behavior unchanged.

- ValidateProxyAddr: allow https:// to any host (cross-machine); http://
  and bare host:port stay same-host only; userinfo/path/query/fragment
  remain rejected.
- Add ProxyScheme and route the interceptor URL rewrite through the
  configured scheme (https for remote, http for same-host). ProxyScheme
  parses the address so a mixed-case HTTPS:// cannot silently downgrade to
  plaintext HTTP.
- Update LARKSUITE_CLI_AUTH_PROXY doc and server-demo README for the new
  policy; refresh the package comment.
- Tests: case-insensitive scheme, IPv6 https, https userinfo rejection,
  query/fragment rejection, ProxyHost https forms, and end-to-end
  interceptor scheme selection.

2026-06-02 20:13:47 +08:00

..

contentsafety

feat: add configurable content-safety scanning (#606)

2026-04-23 17:18:29 +08:00

credential

Feat/auth sidecar proxy (#532)

2026-04-20 20:24:51 +08:00

fileio

refactor: migrate drive/doc/sheets shortcuts to FileIO (#339)

2026-04-09 16:34:59 +08:00

platform

feat(platform): support multiple policy rules per plugin (#1182)

2026-05-30 17:05:33 +08:00

transport

feat(sidecar): support remote HTTPS sidecar addresses

2026-06-02 20:13:47 +08:00