zen: add security check

This commit is contained in:
Frank
2026-07-21 14:51:43 -04:00
parent 76ced5418f
commit 4438f69aac
@@ -775,7 +775,11 @@ export async function handler(
) )
if (!data) throw new AuthError(t("zen.api.error.invalidApiKey")) if (!data) throw new AuthError(t("zen.api.error.invalidApiKey"))
if (data.workspace.isBlocked || data.workspace.isFlaggedByAnthropic || data.workspace.isFlaggedByOpenAI) if (
data.workspace.isBlocked ||
(data.workspace.isFlaggedByAnthropic && modelInfo.id.startsWith("claude-")) ||
(data.workspace.isFlaggedByOpenAI && modelInfo.id.startsWith("gpt-"))
)
throw new AuthError(t("zen.api.error.requestBlockedByUpstreamProvider")) throw new AuthError(t("zen.api.error.requestBlockedByUpstreamProvider"))
if ( if (
modelInfo.id.startsWith("alpha-") && modelInfo.id.startsWith("alpha-") &&