From 70a24697ea0028e19f22712fd63059538cb4bee7 Mon Sep 17 00:00:00 2001 From: Frank Date: Mon, 21 Sep 2026 04:40:11 -0400 Subject: [PATCH] fix(console): authenticate inference proxy --- infra/console.ts | 1 + packages/console/app/src/lib/inference-proxy.ts | 1 + 2 files changed, 2 insertions(+) diff --git a/infra/console.ts b/infra/console.ts index ef53d6a87ba..630bb56fec7 100644 --- a/infra/console.ts +++ b/infra/console.ts @@ -283,6 +283,7 @@ new sst.cloudflare.x.SolidStart("Console", { ZEN_LITE_PRICE, new sst.Secret("ZEN_LIMITS"), new sst.Secret("ZEN_SESSION_SECRET"), + new sst.Secret("CLOUDFLARE_ACCESS_CLIENT_ID"), ...ZEN_MODELS, ...($dev ? [ diff --git a/packages/console/app/src/lib/inference-proxy.ts b/packages/console/app/src/lib/inference-proxy.ts index d57b1033cae..d6515c3386d 100644 --- a/packages/console/app/src/lib/inference-proxy.ts +++ b/packages/console/app/src/lib/inference-proxy.ts @@ -81,6 +81,7 @@ export async function proxyInference( ]) forwarded.headers.delete(name) forwarded.headers.set("authorization", `Bearer ${key}`) + forwarded.headers.set("CF-Access-Client-Id", Resource.CLOUDFLARE_ACCESS_CLIENT_ID.value) const ip = request.headers.get("cf-connecting-ip") if (ip) forwarded.headers.set("x-zen-ip", ip) const requestID = request.headers.get("x-opencode-request-id") ?? request.headers.get("x-opencode-request")