Skip to content

Conversation

@fengtality
Copy link
Contributor

Summary

  • Adds a catch-all proxy router at /api/gateway-proxy/* that forwards requests to the Gateway server unchanged
  • This allows the dashboard to access all Gateway endpoints through the API without needing each endpoint to be explicitly defined
  • Protected by HTTP Basic Auth like all other routes

Examples

GET /api/gateway-proxy/wallet -> GET localhost:15888/wallet
POST /api/gateway-proxy/wallet/add -> POST localhost:15888/wallet/add
GET /api/gateway-proxy/config -> GET localhost:15888/config

Security Review

  • ✅ Protected by authentication (same auth_user dependency as other routers)
  • ✅ Fixed target host (Gateway URL from config, not user-controllable)
  • ✅ No SSRF risk - forwards only to internal Gateway service

Test plan

  • Verify authentication is required
  • Test forwarding GET/POST requests to Gateway
  • Test health check endpoint at /api/gateway-proxy

🤖 Generated with Claude Code

- Add bots/conf/ to .gitignore to prevent config files from being checked in
- Add gateway_proxy.py router

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@rapcmia rapcmia self-requested a review January 16, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants