mirror of
https://github.com/bilawalsidhu/gods-eye-view.git
synced 2026-11-04 18:34:02 +00:00
7aa9bbd3be
The cost-bearing endpoints (/api/realtime/token, /api/openai/hud-summary, /api/google/nearby-places) and the voice debug log refuse cross-site browser requests: a foreign or opaque Origin, a Sec-Fetch-Site other than same-origin/none, or proxy forwarding headers. Loopback tools without an Origin and the LAN opt-in keep working. The dev and preview servers send one shared Content-Security-Policy, and embed-mode framing rewrites only the frame-ancestors directive of it. Salvaged from #242 onto current main. Co-authored-by: Sameh Khamis <[email protected]> Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
48 lines
1.4 KiB
JavaScript
48 lines
1.4 KiB
JavaScript
import { defaultSourceRoot } from './common/source-root.js';
|
|
import { handleHudSummary } from './openai/hud-summary.js';
|
|
import { createDebugLogHandler } from './openai/debug-log.js';
|
|
import { createRealtimeTokenHandler } from './openai/realtime.js';
|
|
import { sameSiteGated } from './common/same-site.js';
|
|
|
|
/**
|
|
* Vite plugin: OpenAI Realtime ephemeral client secret.
|
|
*
|
|
* Keeps OPENAI_API_KEY server-side while the browser connects to the
|
|
* Realtime API over WebRTC with a short-lived secret.
|
|
*/
|
|
function openAiRealtimeProxy({
|
|
sourceRoot = defaultSourceRoot,
|
|
annotationGuidance,
|
|
realtime = {},
|
|
} = {}) {
|
|
function install(middlewares) {
|
|
// Cost-bearing and log endpoints refuse cross-site browser requests
|
|
// (see server/providers/common/same-site.js and SECURITY.md).
|
|
middlewares.use('/api/openai/hud-summary', sameSiteGated(handleHudSummary));
|
|
|
|
middlewares.use(
|
|
'/api/realtime/debug-log',
|
|
sameSiteGated(createDebugLogHandler({ sourceRoot })),
|
|
);
|
|
|
|
middlewares.use(
|
|
'/api/realtime/token',
|
|
sameSiteGated(
|
|
createRealtimeTokenHandler({ ...realtime, annotationGuidance }),
|
|
),
|
|
);
|
|
}
|
|
|
|
return {
|
|
name: 'openai-realtime-proxy',
|
|
configureServer(server) {
|
|
install(server.middlewares);
|
|
},
|
|
configurePreviewServer(server) {
|
|
install(server.middlewares);
|
|
},
|
|
};
|
|
}
|
|
|
|
export { openAiRealtimeProxy };
|