-
Notifications
You must be signed in to change notification settings - Fork 59.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Bug] 为什么要把api路由暴露出来? #2714
Comments
Title: [Bug] Why should the api route be exposed? Describe problem How to reproduce Seeing the previous issues, it must be caused by the interface being stolen: #518 |
请使用项目 README 中介绍的密码功能防护你的 api 接口。 |
Please use the password function introduced in the project README to protect your api interface. |
描述问题
将项目部署到公网,发现被盗刷,排查日志发现,有人在 通过工具请求 项目地址.com/api/xxx 的接口,api接口会直接转发到openai,请问为什么这么设计?也没有关闭的地方
如何复现
例如请求 项目地址/api/openai/v1/chat/completions
看到之前的 issues ,想必是接口被盗刷造成的:#518
The text was updated successfully, but these errors were encountered: