copy.ts
1.4 KB
-
feat(openapi): refine API key auth proxy and app isolation (#7126) · e24fef92
* feat(openapi): allow app-level API Key display and restrict scope - Expose raw API Key in app-level listing to support key replication - Restrict app-level API Key usage to chat completion endpoints only - Add COPY_API_KEY audit event for tracking key access - Implement API Key request path validation for security enforcement * feat(openapi): support API key auth proxy for team members - Add `authProxy` configuration to team-level API keys. - Implement `ChatCompletionAuthProxy` schema for optional identity delegation in chat completion requests. - Add `resolveChatCompletionEffectiveTmbId` to handle proxy logic, ensuring members exist within the key's team. - Update `authChatCompletionHeaderRequest` to integrate identity proxying while maintaining strict security boundaries for chat access. - Add internationalization support for the new feature in settings. * feat(openapi): distinguish global and app API keys - Update documentation to clarify the distinction between Global and App API keys. - Enforce `authProxy` permissions: only allow team owners to enable `authProxy` on Global API Keys. - Restrict `authProxy` usage to Global API Keys; App API Keys do not support this feature. - Migrate API key management UI to `MyModalV2`. - Add test coverage for API key update permissions. * fix(openapi): update new API key tip copy * fix(openapi): copy API key without modal * fix(openapi): address API key review comments * fix(openapi): ensure API key copy audit completes
Finley Ge committed