mirror of
https://github.com/larksuite/cli.git
synced 2026-07-14 05:31:59 +08:00
Two CodeRabbit findings on the previous commit: 1. The docs-request selectors used strings.Contains, so a wrong API prefix or version (e.g. docs_ai/v2) could still match while the mock answers any path with a generic success. Select by the full exact path /open-apis/docs_ai/v1/documents/<doc>/fetch instead. 2. The upstream assertion proved token injection but would not notice the forward leaking sidecar wire-protocol headers. Assert every X-Lark-Proxy-* header and X-Lark-Body-Sha256 is absent from the forwarded docs request.