byokey-proxy 0.10.0

Bring Your Own Keys — AI subscription-to-API proxy gateway
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

//! HTTP route handlers for all proxy endpoints.
//!
//! - [`chat`] / [`messages`] / [`models`] — `OpenAI`-compatible API.
//! - [`amp`] / [`amp_provider`]           — Amp CLI / `AmpCode` compatibility.
//! - [`accounts`] / [`status`] / [`ratelimits`] — Management API.

pub mod accounts;
pub(crate) mod amp;
pub(crate) mod amp_provider;
pub mod amp_quota;
pub mod amp_threads;
pub(crate) mod chat;
pub(crate) mod messages;
pub(crate) mod models;
pub mod ratelimits;
pub mod status;
pub mod usage;

// ── Shared header-filtering constants for proxy handlers ────────────

/// Headers that must not be forwarded (hop-by-hop per RFC 2616 §13.5.1).
pub(crate) const HOP_BY_HOP: &[&str] = &[
    "connection",
    "keep-alive",
    "proxy-authenticate",
    "proxy-authorization",
    "te",
    "trailers",
    "transfer-encoding",
    "upgrade",
];

/// Authentication headers stripped from client requests in shared-proxy mode.
pub(crate) const CLIENT_AUTH_HEADERS: &[&str] = &["authorization", "x-api-key", "x-goog-api-key"];

/// Headers that can fingerprint or reveal the client's network identity.
pub(crate) const FINGERPRINT_HEADERS: &[&str] = &[
    "x-forwarded-for",
    "x-forwarded-host",
    "x-forwarded-proto",
    "x-real-ip",
    "forwarded",
    "via",
    "priority",
];