aicodeswitch 2.0.4 → 2.0.5

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### 2.0.5 (2026-01-27)
+
 ### 2.0.4 (2026-01-27)
 
 ### 2.0.3 (2026-01-27)

package/dist/server/proxy-server.js

@@ -1127,14 +1127,40 @@ class ProxyServer {
             }
         });
     }
+    /**
+     * 对敏感的 header 值进行脱敏处理
+     * @param key header 键（小写）
+     * @param value header 值
+     * @returns 脱敏后的值，如果 header 是敏感的则返回 32 个 *
+     */
+    sanitizeHeaderValue(key, value) {
+        // 需要脱敏的敏感 header 列表（不区分大小写）
+        const sensitiveHeaders = [
+            'authorization', // Bearer token
+            'x-api-key', // API key
+            'api-key', // API key
+            'apikey', // API key
+            'x-openai-api-key', // OpenAI API key
+            'openai-api-key', // OpenAI API key
+            'anthropic-api-key', // Anthropic API key
+            'access-token', // Access token
+            'x-anthropic-api-key', // Anthropic API key
+            'refresh-token', // Refresh token
+        ];
+        // 检查是否是敏感 header
+        if (sensitiveHeaders.includes(key)) {
+            return '********************************';
+        }
+        return value;
+    }
     normalizeHeaders(headers) {
         const normalized = {};
         for (const [key, value] of Object.entries(headers)) {
             if (typeof value === 'string') {
-                normalized[key] = value;
+                normalized[key] = this.sanitizeHeaderValue(key.toLowerCase(), value);
             }
             else if (Array.isArray(value)) {
-                normalized[key] = value.join(', ');
+                normalized[key] = this.sanitizeHeaderValue(key.toLowerCase(), value.join(', '));
             }
         }
         return normalized;
@@ -1144,13 +1170,13 @@ class ProxyServer {
         for (const [key, value] of Object.entries(headers)) {
             if (value !== null && value !== undefined) {
                 if (typeof value === 'string') {
-                    normalized[key] = value;
+                    normalized[key] = this.sanitizeHeaderValue(key.toLowerCase(), value);
                 }
                 else if (Array.isArray(value)) {
-                    normalized[key] = value.join(', ');
+                    normalized[key] = this.sanitizeHeaderValue(key.toLowerCase(), value.join(', '));
                 }
                 else {
-                    normalized[key] = String(value);
+                    normalized[key] = this.sanitizeHeaderValue(key.toLowerCase(), String(value));
                 }
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aicodeswitch",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "description": "A tool to help you manage AI programming tools to access large language models locally. It allows your Claude Code, Codex and other tools to no longer be limited to official models.",
   "author": "tangshuang",
   "license": "GPL-3.0",