feat(desktop): support remote runtime headers

2026-06-30 00:30:48 +03:00
parent 9c1eb755f9
commit 359c73fcf3
23 changed files with 458 additions and 45 deletions
@@ -0,0 +1,26 @@
+import { describe, expect, test } from 'bun:test';
+import { sanitizeRuntimeRequestHeaders } from './runtime-request-headers.mjs';
+
+describe('sanitizeRuntimeRequestHeaders', () => {
+  test('preserves safe custom headers', () => {
+    expect(sanitizeRuntimeRequestHeaders({
+      ' CF-Access-Client-Id ': ' client-id ',
+      'X-Custom-Header': 'value',
+    })).toEqual({
+      'CF-Access-Client-Id': 'client-id',
+      'X-Custom-Header': 'value',
+    });
+  });
+
+  test('drops invalid and reserved headers', () => {
+    expect(sanitizeRuntimeRequestHeaders({
+      Authorization: 'Bearer proxy-token',
+      'authorization': 'Bearer lower-token',
+      'Bad:Name': 'value',
+      'Bad\nName': 'value',
+      'Bad-Value': 'line\nbreak',
+      Empty: '',
+      Good: 'ok',
+    })).toEqual({ Good: 'ok' });
+  });
+});