| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-22 | 945 Bytes | |
| v1.8.8.6 source code.tar.gz | 2026-10-22 | 7.5 MB | |
| v1.8.8.6 source code.zip | 2026-10-22 | 11.4 MB | |
| Totals: 3 Items | 18.9 MB | 0 | |
What's Changed
Fixed
- Make the outbound credential headers mutually exclusive so a client-supplied credential can no longer override the gateway-injected upstream key: once BFE takes ownership of the upstream credential, the outbound request keeps only the header the request's
model_protocoladapter injects and dropsAuthorization/x-api-key/x-goog-api-key, which used to be forwarded as-is — an upstream that prefers a residual header (kimi:x-api-keywins overAuthorization; bailian:Authorizationwins and never falls back) authenticated with the client token, answered 401, and that 401 was charged to the selected key: two requests from one client marked both kimi keys dead for 3600s, the cluster circuit-broke and traffic was silently degraded tobailian/deepseek-v4.1-flashwhile the client still saw 200 (issue [#1447])
Full Changelog: https://github.com/bfenetworks/bfe/blob/v1.8.8.6/CHANGELOG.md