fix: change env and fix a bug which OPENAI_ will exposing to other openai instance.

its not make your api key leak but its will make your request confuse in openai ai gateway

Author: moonrailgun

src/server/utils/env.ts

@@ -72,10 +72,12 @@ export const env = {
     },
   },
   openai: {
-    enable: Boolean(process.env.OPENAI_API_KEY),
-    baseUrl: process.env.OPENAI_BASE_URL,
-    apiKey: process.env.OPENAI_API_KEY,
-    modelName: process.env.OPENAI_MODEL_NAME ?? 'gpt-4o',
+    // This only work on tianji internal usage, which call ai feature by tianji.
+    // add `SHARED_` prefix to avoid exposing to other OpenAI instances.
+    enable: Boolean(process.env.SHARED_OPENAI_API_KEY),
+    baseUrl: process.env.SHARED_OPENAI_BASE_URL,
+    apiKey: process.env.SHARED_OPENAI_API_KEY,
+    modelName: process.env.SHARED_OPENAI_MODEL_NAME ?? 'gpt-4o',
   },
   allowRegister: checkEnvTrusty(process.env.ALLOW_REGISTER),
   allowOpenapi: checkEnvTrusty(process.env.ALLOW_OPENAPI ?? 'true'),

website/docs/api/authentication.md

@@ -13,7 +13,7 @@ The Tianji API uses **Bearer Token** authentication. You need to include your AP
 ### HTTP Header Format
 
 ```http
-Authorization: Bearer YOUR_API_KEY
+Authorization: Bearer <YOUR_API_KEY>
 ```
 
 ## Obtaining API Keys

website/docs/api/getting-started.md

@@ -54,7 +54,7 @@ Test your API connection using curl:
 
 ```bash
 curl -X GET "https://your-tianji-domain.com/open/global/config" \
-  -H "Authorization: Bearer YOUR_API_KEY" \
+  -H "Authorization: Bearer <YOUR_API_KEY>" \
   -H "Content-Type: application/json"
 ```
 

website/docs/install/environment.md

@@ -62,9 +62,9 @@ Tianji supports various environment variables to customize its behavior. You can
 
 | Variable | Description | Default | Example |
 | --- | --- | --- | --- |
-| `OPENAI_API_KEY` | OpenAI API key | - | `your-openai-api-key` |
-| `OPENAI_BASE_URL` | Custom OpenAI API URL | - | `https://api.openai.com/v1` |
-| `OPENAI_MODEL_NAME` | OpenAI model to use | `gpt-4o` | `gpt-3.5-turbo` |
+| `SHARED_OPENAI_API_KEY` | OpenAI API key | - | `your-openai-api-key` |
+| `SHARED_OPENAI_BASE_URL` | Custom OpenAI API URL | - | `https://api.openai.com/v1` |
+| `SHARED_OPENAI_MODEL_NAME` | OpenAI model to use | `gpt-4o` | `gpt-3.5-turbo` |
 | `DEBUG_AI_FEATURE` | Debug AI features | `false` | `true` |
 
 ## Sandbox Configuration

website/i18n/de/docusaurus-plugin-content-docs/current/api/authentication.md

@@ -13,7 +13,7 @@ Die Tianji-API verwendet die **Bearer-Token**-Authentifizierung. Sie müssen Ihr
 ### HTTP-Header-Format
 
 ```http
-Authorization: Bearer YOUR_API_KEY
+Authorization: Bearer <YOUR_API_KEY>
 ```
 
 ## Erhalt von API-Schlüsseln

website/i18n/de/docusaurus-plugin-content-docs/current/api/getting-started.md

@@ -54,7 +54,7 @@ Testen Sie Ihre API-Verbindung mit curl:
 
 ```bash
 curl -X GET "https://your-tianji-domain.com/open/global/config" \
-  -H "Authorization: Bearer YOUR_API_KEY" \
+  -H "Authorization: Bearer <YOUR_API_KEY>" \
   -H "Content-Type: application/json"
 ```
 

website/i18n/de/docusaurus-plugin-content-docs/current/install/environment.md

@@ -62,9 +62,9 @@ Tianji unterstützt verschiedene Umgebungsvariablen zur Anpassung des Verhaltens
 
 | Variable | Beschreibung | Standard | Beispiel |
 | --- | --- | --- | --- |
-| `OPENAI_API_KEY` | OpenAI API-Schlüssel | - | `your-openai-api-key` |
-| `OPENAI_BASE_URL` | Benutzerdefinierte OpenAI API-URL | - | `https://api.openai.com/v1` |
-| `OPENAI_MODEL_NAME` | Zu verwendendes OpenAI-Modell | `gpt-4o` | `gpt-3.5-turbo` |
+| `SHARED_OPENAI_API_KEY` | OpenAI API-Schlüssel | - | `your-openai-api-key` |
+| `SHARED_OPENAI_BASE_URL` | Benutzerdefinierte OpenAI API-URL | - | `https://api.openai.com/v1` |
+| `SHARED_OPENAI_MODEL_NAME` | Zu verwendendes OpenAI-Modell | `gpt-4o` | `gpt-3.5-turbo` |
 | `DEBUG_AI_FEATURE` | AI-Funktionen debuggen | `false` | `true` |
 
 ## Sandbox-Konfiguration

website/i18n/fr/docusaurus-plugin-content-docs/current/install/environment.md

@@ -62,9 +62,9 @@ Tianji prend en charge diverses variables d'environnement pour personnaliser son
 
 | Variable | Description | Défault | Exemple |
 | --- | --- | --- | --- |
-| `OPENAI_API_KEY` | Clé API OpenAI | - | `votre-clé-api-openai` |
-| `OPENAI_BASE_URL` | URL API OpenAI personnalisée | - | `https://api.openai.com/v1` |
-| `OPENAI_MODEL_NAME` | Modèle OpenAI à utiliser | `gpt-4o` | `gpt-3.5-turbo` |
+| `SHARED_OPENAI_API_KEY` | Clé API OpenAI | - | `votre-clé-api-openai` |
+| `SHARED_OPENAI_BASE_URL` | URL API OpenAI personnalisée | - | `https://api.openai.com/v1` |
+| `SHARED_OPENAI_MODEL_NAME` | Modèle OpenAI à utiliser | `gpt-4o` | `gpt-3.5-turbo` |
 | `DEBUG_AI_FEATURE` | Déboguer les fonctionnalités AI | `false` | `true` |
 
 ## Configuration du Bac à Sable

website/i18n/ja/docusaurus-plugin-content-docs/current/api/authentication.md

@@ -13,7 +13,7 @@ Tianji APIは**Bearer Token**認証を使用します。各APIリクエストの
 ### HTTPヘッダーフォーマット
 
 ```http
-Authorization: Bearer YOUR_API_KEY
+Authorization: Bearer <YOUR_API_KEY>
 ```
 
 ## APIキーの取得

website/i18n/ja/docusaurus-plugin-content-docs/current/api/getting-started.md

@@ -54,7 +54,7 @@ curl を使用して API 接続をテストします：
 
 ```bash
 curl -X GET "https://your-tianji-domain.com/open/global/config" \
-  -H "Authorization: Bearer YOUR_API_KEY" \
+  -H "Authorization: Bearer <YOUR_API_KEY>" \
   -H "Content-Type: application/json"
 ```