vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 11:40:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: route slack media auth fetch through runtime

Browse Source
This commit is contained in:
Peter Steinberger
2026-04-24 00:13:37 +01:00
parent 6f139dee2e
commit b9a0795761
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
extensions/slack/src/monitor/media.ts
View File

@@ -95,6 +95,10 @@ function createSlackMediaFetch(): FetchLike {
};
}
function resolveSlackFetchForRuntime(): typeof fetch {
return isMockedFetch(globalThis.fetch) ? globalThis.fetch : fetchWithRuntimeDispatcher;
}
/**
* Fetches a URL with Authorization header while keeping same-origin redirects
* authenticated and dropping auth once the redirect crosses origins.
@@ -102,8 +106,9 @@ function createSlackMediaFetch(): FetchLike {
export async function fetchWithSlackAuth(url: string, token: string): Promise<Response> {
const parsed = assertSlackFileUrl(url);
const authHeaders = createSlackAuthHeaders(token);
const fetchImpl = resolveSlackFetchForRuntime();
const initialRes = await fetch(parsed.href, {
const initialRes = await fetchImpl(parsed.href, {
headers: authHeaders,
redirect: "manual",
});
@@ -122,12 +127,12 @@ export async function fetchWithSlackAuth(url: string, token: string): Promise<Re
return initialRes;
}
if (resolvedUrl.origin === parsed.origin) {
return fetch(resolvedUrl.toString(), {
return fetchImpl(resolvedUrl.toString(), {
headers: authHeaders,
redirect: "follow",
});
}
return fetch(resolvedUrl.toString(), { redirect: "follow" });
return fetchImpl(resolvedUrl.toString(), { redirect: "follow" });
}
const SLACK_MEDIA_SSRF_POLICY = {