mirror of
https://github.com/larksuite/cli.git
synced 2026-07-06 08:12:36 +08:00
07da0c8090
Relax the auth-sidecar proxy address policy so a remote central sidecar reachable over TLS can be used, while keeping existing same-host plaintext behavior unchanged. - ValidateProxyAddr: allow https:// to any host (cross-machine); http:// and bare host:port stay same-host only; userinfo/path/query/fragment remain rejected. - Add ProxyScheme and route the interceptor URL rewrite through the configured scheme (https for remote, http for same-host). ProxyScheme parses the address so a mixed-case HTTPS:// cannot silently downgrade to plaintext HTTP. - Update LARKSUITE_CLI_AUTH_PROXY doc and server-demo README for the new policy; refresh the package comment. - Tests: case-insensitive scheme, IPv6 https, https userinfo rejection, query/fragment rejection, ProxyHost https forms, and end-to-end interceptor scheme selection.
28 lines
1.1 KiB
Go
28 lines
1.1 KiB
Go
// Copyright (c) 2026 Lark Technologies Pte. Ltd.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package envvars
|
|
|
|
const (
|
|
CliAppID = "LARKSUITE_CLI_APP_ID"
|
|
CliAppSecret = "LARKSUITE_CLI_APP_SECRET"
|
|
CliBrand = "LARKSUITE_CLI_BRAND"
|
|
CliUserAccessToken = "LARKSUITE_CLI_USER_ACCESS_TOKEN"
|
|
CliTenantAccessToken = "LARKSUITE_CLI_TENANT_ACCESS_TOKEN"
|
|
CliDefaultAs = "LARKSUITE_CLI_DEFAULT_AS"
|
|
CliStrictMode = "LARKSUITE_CLI_STRICT_MODE"
|
|
|
|
// Sidecar proxy (auth proxy mode)
|
|
CliAuthProxy = "LARKSUITE_CLI_AUTH_PROXY" // sidecar address http(s)://host[:port]; plaintext http is same-host only, a remote sidecar must use https. e.g. "http://127.0.0.1:16384" or "https://sidecar.mycorp.com"
|
|
CliProxyKey = "LARKSUITE_CLI_PROXY_KEY" // HMAC signing key shared with sidecar
|
|
|
|
// Content safety scanning mode
|
|
CliContentSafetyMode = "LARKSUITE_CLI_CONTENT_SAFETY_MODE"
|
|
|
|
CliAgentTrace = "LARKSUITE_CLI_AGENT_TRACE"
|
|
|
|
CliProxyEnable = "LARKSUITE_CLI_PROXY_ENABLE"
|
|
CliProxyAddress = "LARKSUITE_CLI_PROXY_ADDRESS"
|
|
CliCAPath = "LARKSUITE_CLI_CA_PATH"
|
|
)
|