Repository navigation
feat: identity hardening modelled on sub2api - #18
Merged
Merged
Conversation
- Codex: learn free-text os_info platforms, present the canonical platform before a native client is seen, forward native identity headers and keep session identifiers consistent across headers, turn metadata, client_metadata and prompt_cache_key. - Codex: opt-in per-account identifier convergence (device, session, full) from a rotatable seed (migration 039). - Codex: turn in-stream server_is_overloaded and slow_down into retryable 503 responses before anything reaches the client. - Claude: opt-in Claude Code (Node.js 24) TLS ClientHello via uTLS, also through HTTP and SOCKS5 proxies. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Peek at most 100 ms for an in-stream overload rejection so slow streams keep keepalive and idle-timeout behavior (fixes hanging server tests). - Codex accounts converge identifiers in session mode by default, seeding existing accounts in migration 039 and new ones on first use; session mode keeps one prompt cache key per real conversation. - Dial the TLS fingerprint test by name so SNI is sent. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Implements the four fingerprint gaps found by comparing CLIProxyAPI and sub2api, plus sub2api's risk-control mitigations:
server_is_overloaded/slow_down→ retryable 503.Tests run in CI. Real-account effectiveness must be verified by canary.
🤖 Generated with Claude Code