gsadmin/pulse
1
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-09-09 18:15:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Point OpenRouter attribution at pulserelay.pro and fix Fireworks key link

Browse Source 
External-reference audit after the fabricated security@pulseapp.io find:
the OpenRouter HTTP-Referer claimed pulse.app, a third-party domain Pulse
has never owned, and the in-app Fireworks 'Get API key' link 404s
(fireworks.ai/account/api-keys moved to
app.fireworks.ai/settings/users/api-keys).
This commit is contained in:
rcourtman
2026-09-01 15:49:05 +01:00
parent 3c31aa4805
commit b1240c6ca3
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend-modern/src/components/Settings/aiSettingsModel.ts
+1 -1
View File
@@ -245,7 +245,7 @@ export const AI_PROVIDER_CONFIGS: AIProviderConfig[] = [
placeholder: 'Fireworks API key',
configuredPlaceholder: '••••••••••• (configured)',
actionLinkLabel: 'Get API key →',
actionLinkHref: 'https://fireworks.ai/account/api-keys',
actionLinkHref: 'https://app.fireworks.ai/settings/users/api-keys',
helperText: 'Uses https://api.fireworks.ai/inference/v1 automatically.',
clearTitle: 'Clear API key',
},
internal/ai/providers/openai.go
+1 -1
View File
@@ -24,7 +24,7 @@ const (
openaiStreamMaxRetries = 1
openaiStreamInitialBackoff = 1 * time.Second
openaiStreamChunkTimeout = 12 * time.Second
openrouterRefererURL = "https://pulse.app"
openrouterRefererURL = "https://pulserelay.pro"
openrouterAppTitle = "Pulse"
// OpenRouter preflights affordability against the requested maximum
// completion budget. Leaving it unset can make small chat turns reserve a
internal/ai/providers/openai_test.go
+2 -2
View File
@@ -1243,7 +1243,7 @@ func TestOpenAIClient_ListModels_OpenRouterReturnsCatalog(t *testing.T) {
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
assert.Equal(t, "/api/v1/models", r.URL.Path)
assert.Equal(t, "Bearer sk-test", r.Header.Get("Authorization"))
assert.Equal(t, "https://pulse.app", r.Header.Get("HTTP-Referer"))
assert.Equal(t, "https://pulserelay.pro", r.Header.Get("HTTP-Referer"))
assert.Equal(t, "Pulse", r.Header.Get("X-Title"))
w.Header().Set("Content-Type", "application/json")
@@ -1274,7 +1274,7 @@ func TestOpenAIClient_TestConnection_OpenRouterValidatesCurrentKey(t *testing.T)
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
assert.Equal(t, "/api/v1/key", r.URL.Path)
assert.Equal(t, "Bearer sk-test", r.Header.Get("Authorization"))
assert.Equal(t, "https://pulse.app", r.Header.Get("HTTP-Referer"))
assert.Equal(t, "https://pulserelay.pro", r.Header.Get("HTTP-Referer"))
assert.Equal(t, "Pulse", r.Header.Get("X-Title"))
w.Header().Set("Content-Type", "application/json")