DaydreamCoding 56908d3c4c feat(openai): codex_cli_only 新增放行 Claude Code Codex 插件的机制 ...

适用场景：在 Claude Code 中使用 https://github.com/openai/codex-plugin-cc
插件时，插件经官方 codex app-server 以 clientInfo.name="Claude Code" 完成
initialize 握手，请求头被设为 originator=Claude Code、User-Agent 含
"Claude Code/"，不在官方客户端白名单内，原本会被 codex_cli_only 拦截 403。

在官方客户端白名单未命中时评估两层独立放行（OR 语义）：

- 按账号：account.Extra.codex_cli_only_allowed_clients 引用命名预设
  （目前仅 claude_code），detector reason=allowed_client_matched
- 全局开关：/admin/settings 网关服务 OpenAI 区块新增
  openai_allow_claude_code_codex_plugin（默认 false），开启后对所有
  codex_cli_only 账号统一放行，detector reason=global_allowed_client_matched

签名仍要求 originator=Claude Code 精确等值 + UA 含 "Claude Code/"。
上游转发保持透传不变。

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-27 23:55:34 +08:00

..

account_codex_import_test.go

feat: 优化 OAuth 账号导入流程

2026-05-08 11:36:09 +08:00

account_codex_import.go

fix(service): handle unexpected default transport type, simplify warning append

2026-05-11 11:43:44 +08:00

account_data_handler_test.go

…

account_data.go

fix(security): 屏蔽 admin 账号接口返回的敏感凭证字段

2026-05-08 03:44:04 +08:00

account_handler_available_models_test.go

feat: expose upstream model sync admin API

2026-05-18 19:01:33 +08:00

account_handler_list_test.go

feat(admin): 账号管理列表新增创建时间列

2026-05-26 19:59:12 +08:00

account_handler_mixed_channel_test.go

test: cover filter-target account bulk update

2026-04-27 17:32:34 +08:00

account_handler_passthrough_test.go

…

account_handler.go

fix(account): 重新授权不再清空 Extra 配置

2026-05-26 19:46:08 +08:00

account_today_stats_cache.go

…

admin_basic_handlers_test.go

feat(group): 支持自定义 /v1/models 模型列表

2026-05-27 18:00:45 +08:00

admin_helpers_test.go

feat(openai): OpenAI Fast/Flex Policy 完整实现（HTTP + WebSocket + Admin）

2026-04-28 11:15:09 +08:00

admin_service_stub_test.go

feat(group): 支持自定义 /v1/models 模型列表

2026-05-27 18:00:45 +08:00

affiliate_handler.go

feat: add admin affiliate record pages

2026-05-03 20:33:13 +08:00

announcement_handler_sort_test.go

…

announcement_handler.go

…

antigravity_oauth_handler.go

…

apikey_handler_test.go

fix(api-key): reset rate limit usage cache

2026-04-27 16:47:44 +08:00

apikey_handler.go

fix(api-key): reset rate limit usage cache

2026-04-27 16:47:44 +08:00

backup_handler.go

…

batch_update_credentials_test.go

…

channel_handler_test.go

feat(channels): 模型定价支持一键同步最新模型

2026-05-19 20:32:32 +08:00

channel_handler.go

feat(channels): 模型定价支持一键同步最新模型

2026-05-19 20:32:32 +08:00

channel_monitor_handler.go

feat(channel-monitor): 暴露 API 模式接口字段

2026-05-19 22:05:43 +08:00

channel_monitor_template_handler.go

feat(channel-monitor): 暴露 API 模式接口字段

2026-05-19 22:05:43 +08:00

content_moderation_handler.go

feat: 支持内容审计风险阈值配置

2026-05-26 13:58:02 +08:00

dashboard_handler_cache_test.go

…

dashboard_handler_request_type_test.go

…

dashboard_handler_user_breakdown_test.go

…

dashboard_handler.go

feat(usage): 用户用量按平台拆分 + UsersView 列设置可配置 + 用量列排序

2026-05-19 15:25:34 +08:00

dashboard_query_cache.go

…

dashboard_snapshot_v2_handler.go

…

data_management_handler_test.go

…

data_management_handler.go

…

error_passthrough_handler.go

…

gemini_oauth_handler.go

…

group_handler.go

feat(group): 支持自定义 /v1/models 模型列表

2026-05-27 18:00:45 +08:00

id_list_utils_test.go

…

id_list_utils.go

…

idempotency_helper_test.go

…

idempotency_helper.go

…

openai_oauth_handler.go

…

ops_alerts_handler.go

…

ops_dashboard_handler.go

…

ops_handler.go

Remove ops retry replay storage

2026-05-19 19:37:41 +08:00

ops_realtime_handler.go

…

ops_runtime_logging_handler_test.go

…

ops_settings_handler.go

…

ops_snapshot_v2_handler.go

…

ops_system_log_handler_test.go

…

ops_system_log_handler.go

…

ops_ws_handler.go

…

payment_handler.go

feat: add payment order provider snapshots

2026-04-21 12:41:27 +08:00

promo_handler.go

…

proxy_data_handler_test.go

…

proxy_data.go

…

proxy_handler.go

…

redeem_export_handler_test.go

…

redeem_handler_test.go

feat(redeem): 兑换码支持设置使用有效期

2026-05-19 15:53:28 +08:00

redeem_handler.go

feat(redeem): add redeem code batch update

2026-05-20 16:08:41 +08:00

scheduled_test_handler.go

…

search_truncate_test.go

…

setting_handler_auth_source_defaults_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

setting_handler_dingtalk_test.go

feat(dingtalk): 钉钉 OAuth 登录接入与 internal_only 用户属性同步

2026-05-19 15:27:47 +08:00

setting_handler_platform_quota_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

setting_handler.go

feat(openai): codex_cli_only 新增放行 Claude Code Codex 插件的机制

2026-05-27 23:55:34 +08:00

snapshot_cache_test.go

…

snapshot_cache.go

…

subscription_handler.go

…

system_handler.go

…

tls_fingerprint_profile_handler.go

…

usage_cleanup_handler_test.go

…

usage_handler_request_type_test.go

…

usage_handler_sort_test.go

…

usage_handler.go

…

user_attribute_handler.go

…

user_handler_activity_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

user_handler.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

user_platform_quota_admin_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00

user_platform_quotas_handler_test.go

feat(quota): 用户 × 平台 USD 配额

2026-05-26 10:49:20 +08:00