| 1 | package provider_test |
| 2 | |
| 3 | import ( |
| 4 | "context" |
| 5 | "net/http" |
| 6 | "net/http/httptest" |
| 7 | "reasonix/internal/provider" |
| 8 | "reasonix/internal/provider/anthropic" |
| 9 | "reasonix/internal/provider/openai" |
| 10 | "reasonix/internal/provider/responses" |
| 11 | "testing" |
| 12 | ) |
| 13 | |
| 14 | func TestOpenCodeGoHeadersDoNotLeakToCustomRequestURLAllAdapters(t *testing.T) { |
| 15 | for _, kind := range []string{"chat", "anthropic", "responses"} { |
| 16 | t.Run(kind, func(t *testing.T) { |
| 17 | var headers []http.Header |
| 18 | server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { |
| 19 | headers = append(headers, r.Header.Clone()) |
| 20 | http.Error(w, "fixture authentication rejection", http.StatusUnauthorized) |
| 21 | })) |
| 22 | defer server.Close() |
| 23 | base := "https://opencode.ai/zen/go/v1" |
| 24 | if kind == "anthropic" { |
| 25 | base = "https://opencode.ai/zen/go" |
| 26 | } |
| 27 | extra := map[string]any{"request_url": server.URL, "reject_redirects": true} |
| 28 | var p provider.Provider |
| 29 | var err error |
| 30 | cfg := provider.Config{Name: "header-test", BaseURL: base, Model: "deepseek-v4-flash", APIKey: "fixture", Extra: extra} |
| 31 | switch kind { |
| 32 | case "chat": |
| 33 | p, err = openai.New(cfg) |
| 34 | case "anthropic": |
| 35 | p, err = anthropic.New(cfg) |
| 36 | case "responses": |
| 37 | p = responses.New(responses.Config{Name: cfg.Name, BaseURL: base, Model: cfg.Model, APIKey: cfg.APIKey, RequestURL: server.URL, Mode: "stateless"}) |
| 38 | } |
| 39 | if err != nil { |
| 40 | t.Fatal(err) |
| 41 | } |
| 42 | defer p.(interface{ CloseIdleConnections() }).CloseIdleConnections() |
| 43 | for i := range 4 { |
| 44 | ctx := context.Background() |
| 45 | if i >= 2 { |
| 46 | ctx = provider.WithCacheSession(ctx, "resumed-conversation") |
| 47 | } |
| 48 | _, err = p.Stream(ctx, provider.Request{Messages: []provider.Message{{Role: provider.RoleUser, Content: "fixture"}}}) |
| 49 | if err == nil { |
| 50 | t.Fatal("expected fixture authentication failure") |
| 51 | } |
| 52 | } |
| 53 | if len(headers) != 4 { |
| 54 | t.Fatalf("requests=%d", len(headers)) |
| 55 | } |
| 56 | for _, h := range headers { |
| 57 | if h.Get("x-opencode-session") != "" { |
| 58 | t.Fatalf("official connection identity leaked to custom endpoint: %v", h) |
| 59 | } |
| 60 | } |
| 61 | }) |
| 62 | } |
| 63 | } |
| 64 |