Starstruk Logo MarkStarstruk

v0.68.1

tanchongmin/agentjov0.68.1Apr 13, 2026by fatedier

AI Summary

This release addresses a critical security vulnerability in HTTP proxy configurations where authentication bypass was possible. It updates proxy-style request handling to correctly enforce authentication, returning `407 Proxy Authentication Required` instead of bypassing it when specific configuration options are enabled.

Key Highlights

  • Fixed a configuration-dependent authentication bypass in `type = "http"` proxies.
  • Ensures proxy-style requests return `407 Proxy Authentication Required` on authentication failure.
  • Applies specifically to configurations using `routeByHTTPUser` with `httpUser` or `httpPassword`.

Full Release Notes

## Fixes

* Fixed a configuration-dependent authentication bypass in `type = "http"` proxies when `routeByHTTPUser` is used together with `httpUser` / `httpPassword`. This affected proxy-style requests. Proxy-style authentication failures now return `407 Proxy Authentication Required`.