Harden proxy auth, storage, and conversation access

This commit is contained in:
sid 2026-03-19 19:00:24 -06:00
parent 6cda36312a
commit b9da198e1f
12 changed files with 1362 additions and 121 deletions

View file

@ -1,6 +1,7 @@
# Claude Code Monitor Configuration
# Server Configuration
SERVER_HOST=127.0.0.1
PORT=3001
READ_TIMEOUT=500
WRITE_TIMEOUT=500
@ -18,10 +19,21 @@ ANTHROPIC_MAX_RETRIES=3
# OPENAI_ALLOW_CLIENT_API_KEY=false
# OPENAI_CLIENT_API_KEY_HEADER=x-openai-api-key
# Auth Configuration
# AUTH_ENABLED=false
# AUTH_TOKEN=change-me
# AUTH_API_KEY_HEADER=x-api-key
# AUTH_ALLOW_LOCALHOST_BYPASS=true
# Storage Configuration
DB_PATH=requests.db
STORAGE_CAPTURE_REQUEST_BODY=true
STORAGE_CAPTURE_RESPONSE_BODY=true
STORAGE_METADATA_ONLY=false
STORAGE_RETENTION_DAYS=0
# STORAGE_REDACTED_FIELDS=api_key,authorization,token,password,secret,access_token,refresh_token,client_secret
# CORS Configuration (comma-separated values)
# CORS_ALLOWED_ORIGINS=*
# CORS_ALLOWED_METHODS=GET,POST,PUT,DELETE,OPTIONS
# CORS_ALLOWED_HEADERS=*
# CORS_ALLOWED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000,http://localhost:5173,http://127.0.0.1:5173
# CORS_ALLOWED_METHODS=GET,POST,DELETE,OPTIONS
# CORS_ALLOWED_HEADERS=Accept,Authorization,Content-Type,Anthropic-Version,Anthropic-Beta,X-API-Key,X-Requested-With