scriptoriumadmin/fabro
1
0
Fork 0
mirror of https://github.com/fabro-sh/fabro.git synced 2026-10-09 03:20:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix(llm): send Gemini API key via x-goog-api-key header

Browse source 
API keys in query strings leak to access logs, proxies, and request
traces. Move to the header form Google documents as equivalent for both
generateContent and streamGenerateContent endpoints.
This commit is contained in:
Bryan Helmkamp 2026-04-18 04:32:23 -04:00
parent d793046050
commit 7f83a627ee
No known key found for this signature in database
1 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
lib/crates/fabro-llm/src/providers/gemini.rs
View file

@ -898,11 +898,15 @@ impl ProviderAdapter for Adapter {
let api_body = build_api_request(request);
let url = format!(
"{}/models/{}:generateContent?key={}",
self.http.base_url, request.model, self.http.api_key
"{}/models/{}:generateContent",
self.http.base_url, request.model
);
let mut req = self.http.client.post(&url);
let mut req = self
.http
.client
.post(&url)
.header("x-goog-api-key", &self.http.api_key);
for (key, value) in &self.http.default_headers {
req = req.header(key, value);
}
@ -964,11 +968,15 @@ impl ProviderAdapter for Adapter {
let api_body = build_api_request(request);
let url = format!(
"{}/models/{}:streamGenerateContent?alt=sse&key={}",
self.http.base_url, request.model, self.http.api_key
"{}/models/{}:streamGenerateContent?alt=sse",
self.http.base_url, request.model
);
let mut req = self.http.client.post(&url);
let mut req = self
.http
.client
.post(&url)
.header("x-goog-api-key", &self.http.api_key);
for (key, value) in &self.http.default_headers {
req = req.header(key, value);
}