service/ccm: reject fast-mode external credentials

2026-03-13 23:31:19 +08:00
parent ce543a935f
commit a09174a9a2
1 changed files with 5 additions and 0 deletions
--- a/service/ccm/service.go
+++ b/service/ccm/service.go
@@ -464,6 +464,11 @@ func (s *Service) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 			"extended context (1m) requests cannot be proxied through external credentials")
 		return
 	}
+	if isFastModeRequest(anthropicBetaHeader) && selectedCredential.isExternal() {
+		writeJSONError(w, r, http.StatusBadRequest, "invalid_request_error",
+			"fast mode requests cannot be proxied through external credentials")
+		return
+	}

 	requestContext := selectedCredential.wrapRequestContext(r.Context())
 	defer func() {