chuan/CLIProxyAPI
1
0
Fork 0
mirror of https://github.com/router-for-me/CLIProxyAPI.git synced 2026-02-18 04:10:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

Restrict CLI access to localhost and update README for Gemini compatibility

Browse Source 
- Added localhost-only access restriction to `CLIHandler` for security.
- Updated README to reflect Gemini-compatible API and local access limitation notes.
This commit is contained in:
Luis Pater
2025-07-11 10:57:23 +08:00
parent aa9fd057fe
commit edeadfc389
2 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@@ -1,10 +1,10 @@
# CLI Proxy API # CLI Proxy API
A proxy server that provides an OpenAI-compatible API interface for CLI. This allows you to use CLI models with tools and libraries designed for the OpenAI API. A proxy server that provides an OpenAI-compatible/Gemini-compatible API interface for CLI. This allows you to use CLI models with tools and libraries designed for the OpenAI/Gemini API.
## Features ## Features
- OpenAI-compatible API endpoints for CLI models - OpenAI/Gemini compatible API endpoints for CLI models
- Support for both streaming and non-streaming responses - Support for both streaming and non-streaming responses
- Function calling/tools support - Function calling/tools support
- Multimodal input support (text and images) - Multimodal input support (text and images)
@@ -208,6 +208,10 @@ export CODE_ASSIST_ENDPOINT="http://127.0.0.1:8317"
The server will relay the `loadCodeAssist`, `onboardUser`, and `countTokens` requests. And automatically load balance the text generation requests between the multiple accounts. The server will relay the `loadCodeAssist`, `onboardUser`, and `countTokens` requests. And automatically load balance the text generation requests between the multiple accounts.
> [!NOTE]
> This feature only allows local access because I couldn't find a way to authenticate the requests.
> I hardcoded `127.0.0.1` into the load balancing.
## Contributing ## Contributing
Contributions are welcome! Please feel free to submit a Pull Request. Contributions are welcome! Please feel free to submit a Pull Request.

11
internal/api/cli-handlers.go
View File

@@ -12,10 +12,21 @@ import (
"github.com/tidwall/sjson" "github.com/tidwall/sjson"
"io" "io"
"net/http" "net/http"
"strings"
"time" "time"
) )
func (h *APIHandlers) CLIHandler(c *gin.Context) { func (h *APIHandlers) CLIHandler(c *gin.Context) {
if !strings.HasPrefix(c.Request.RemoteAddr, "127.0.0.1:") {
c.JSON(http.StatusForbidden, ErrorResponse{
Error: ErrorDetail{
Message: "CLI reply only allow local access",
Type: "forbidden",
},
})
return
}
rawJson, _ := c.GetRawData() rawJson, _ := c.GetRawData()
requestRawURI := c.Request.URL.Path requestRawURI := c.Request.URL.Path
if requestRawURI == "/v1internal:generateContent" { if requestRawURI == "/v1internal:generateContent" {