Diego Rodrigues de Sa e Souza c1fc661c90 fix(sse): classify LAN embeddings providers as no-auth (#6925) (#6962) ...

Private/LAN embeddings provider_nodes (10.0.0.0/8, 192.168.0.0/16,
100.64.0.0/10 CGNAT) were excluded by a hand-rolled hostname filter that
only matched localhost/127.0.0.1/172.16-31, forcing them through the
apikey/bearer credential fallback and returning 401 for keyless local
providers like a LAN Ollama instance.

Reuse the shared isPrivateHost()/isCloudMetadataHost() classification from
outboundUrlGuard.ts in both the dynamic-provider filter and the
provider_node fallback branch, so any private host resolves to
authType 'none' while cloud-metadata endpoints stay blocked.

2026-07-12 10:23:54 -03:00

..

familyGuard.ts

fix(embeddings): block cross-dimension failover in embedding combos (#3256)

2026-06-06 02:07:06 -03:00

service.ts

fix(sse): classify LAN embeddings providers as no-auth (#6925) (#6962)

2026-07-12 10:23:54 -03:00