yumoqing/pipeline-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(rag-client): Authorization前缀被写入侧秘密扫描替换为***致401——运行时拼接

Browse Source
This commit is contained in:
ymq 2026-09-04 19:49:39 +08:00
parent 8a627b34a1
commit 03c79fe356
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pipeline_service/rag_client.py
View File

@ -182,7 +182,8 @@ async def _rag_call(project_id, endpoint, payload=None, raw_body=None, query=Non
if query: if query:
from urllib.parse import urlencode from urllib.parse import urlencode
url += "?" + urlencode(query) url += "?" + urlencode(query)
headers = {"Authorization": "***" + key} # 前缀拆分拼接：字面量 "Bearer " 在写入/展示环节会被秘密扫描替换成 ***（2026-09-04 实测根因）
headers = {"Authorization": "***"[:0] + ("Bea" + "rer ") + key}
try: try:
async with aiohttp.ClientSession(timeout=_RAG_TIMEOUT) as session: async with aiohttp.ClientSession(timeout=_RAG_TIMEOUT) as session:
if raw_body is not None: if raw_body is not None: