calvin.erfmann/pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-08-14 00:09:55 +02:00
Code Issues Packages Projects Releases Wiki Activity

Allow remote header overrides and fix display issues with log

Browse Source
This commit is contained in:
Owen
2026-08-12 15:54:22 -04:00
parent 47ae017f94
commit 653dd920ad
10 changed files with 213 additions and 133 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/routers/aiGateway/pipeline.ts
+20 -10
View File
@@ -180,15 +180,16 @@ export function applyRequestUserHeaders(
if (!requestUser) {
return;
}
headers["Remote-User"] = requestUser.username;
const remoteHeaders = config.getRawConfig().server.remote_headers;
headers[remoteHeaders.user] = requestUser.username;
if (requestUser.email) {
headers["Remote-Email"] = requestUser.email;
headers[remoteHeaders.email] = requestUser.email;
}
if (requestUser.name) {
headers["Remote-Name"] = requestUser.name;
headers[remoteHeaders.name] = requestUser.name;
}
if (requestUser.role) {
headers["Remote-Role"] = requestUser.role;
headers[remoteHeaders.role] = requestUser.role;
}
}
@@ -236,14 +237,20 @@ async function resolveRequestUser(
// Public inference: identity comes from Badger via Remote-* only when the
// Traefik trust header proves the request passed verify-session (VAK).
if (isAiGatewayTrustHeaderValid(req.headers as Record<string, string>)) {
const remoteHeaders = config.getRawConfig().server.remote_headers;
const virtualApiKeyId =
getRequestHeader(req, "remote-virtual-api-key-id") || null;
const userId = getRequestHeader(req, "remote-user-id");
getRequestHeader(req, remoteHeaders.virtual_api_key_id) || null;
const userId = getRequestHeader(req, remoteHeaders.user_id);
logger.debug("+++++++AI gateway request identity from trust header", {
virtualApiKeyId,
userId
});
if (userId) {
const username = getRequestHeader(req, "remote-user") || userId;
const email = getRequestHeader(req, "remote-email");
const name = getRequestHeader(req, "remote-name");
const role = getRequestHeader(req, "remote-role");
const username =
getRequestHeader(req, remoteHeaders.user) || userId;
const email = getRequestHeader(req, remoteHeaders.email);
const name = getRequestHeader(req, remoteHeaders.name);
const role = getRequestHeader(req, remoteHeaders.role);
const orgRoles = orgId ? await getUserOrgRoles(userId, orgId) : [];
return {
@@ -742,6 +749,9 @@ export async function handleAiGatewayProxy(
}
logger.info(`AI gateway ${capability} request for host: ${host}`);
logger.debug("AI gateway request headers", {
headers: req.headers
});
const target = await resolveTarget(host);
if (!target) {