ChatGPTNextWeb/NextChat

[Feature] configurable **client** certificate

開放

#3,935 建立於 2024年1月27日

 (3 則留言) (0 個反應) (0 位負責人)TypeScript (59,717 個分叉)batch import
backloghelp wanted

倉庫指標

星標
 (87,992 顆星)
PR 合併指標
 (PR 指標待抓取)

描述

Hi, I encountered a problem with the client certificate verifying / authenticating.

When enabled client certs (typically the Cloudflare mTLS rules), the client must present its private cert (aka .p12/.pfx file) to the server. However since ChatGPT-Next-Web requests the API base from the backend, it would not carry the valid credentials that should have come from a browser request.

So there should be a configurable option to specify a client certificate so that the mutual verification would work.

I have read the issue list and found that #518 #3034 may be related, but both of them didn't mention if it's possible to deploy a client certificate for the backend.

My current approach is to allow the server IP as request src_ip, but it's quite inconvenient since I had to hard code the IP into the rules. So let me ask for a feature to satisfy this scene.

貢獻者指南