Add authentication and host configuration to Anthropic proxy

Change-Id: If6f97c548b00d040beccf17e207c389bcaef3be8
Signed-off-by: Thomas Kosiewski <[email protected]>

Author: ThomasK33

src/anthropic-proxy.ts

@@ -15,6 +15,9 @@ import { providerizeSchema } from "./json-schema";
 export type CreateAnthropicProxyOptions = {
   providers: Record<string, ProviderV2>;
   port?: number;
+  host?: string; // default: 127.0.0.1
+  authToken?: string; // if set, require matching custom header
+  authHeaderName?: string; // if authToken is set, required header name (default: X-AnyClaude-Token)
 };
 
 // createAnthropicProxy creates a proxy server that accepts
@@ -23,10 +26,25 @@ export type CreateAnthropicProxyOptions = {
 // to the Anthropic Message API format.
 export const createAnthropicProxy = ({
   port,
+  host = "127.0.0.1",
   providers,
+  authToken,
+  authHeaderName = "X-AnyClaude-Token",
 }: CreateAnthropicProxyOptions): string => {
   const proxy = http
     .createServer((req, res) => {
+      // Basic auth gate: require matching token via a custom header
+      if (authToken) {
+        const key = authHeaderName.toLowerCase();
+        const headerVal = req.headers[key];
+        const provided = Array.isArray(headerVal) ? headerVal[0] : headerVal;
+        if (!provided || provided !== authToken) {
+          res.writeHead(401, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: "Unauthorized" }));
+          return;
+        }
+      }
+
       if (!req.url) {
         res.writeHead(400, {
           "Content-Type": "application/json",
@@ -222,7 +240,7 @@ export const createAnthropicProxy = ({
         );
       });
     })
-    .listen(port ?? 0);
+    .listen(port ?? 0, host);
 
   const address = proxy.address();
   if (!address) {
@@ -231,5 +249,5 @@ export const createAnthropicProxy = ({
   if (typeof address === "string") {
     return address;
   }
-  return `http://localhost:${address.port}`;
+  return `http://${host === "127.0.0.1" ? "localhost" : host}:${address.port}`;
 };

src/main.ts

@@ -6,6 +6,7 @@ import { createGoogleGenerativeAI } from "@ai-sdk/google";
 import { createOpenAI } from "@ai-sdk/openai";
 import { createXai } from "@ai-sdk/xai";
 import { spawn } from "child_process";
+import { randomUUID } from "crypto";
 import {
   createAnthropicProxy,
   type CreateAnthropicProxyOptions,
@@ -42,28 +43,47 @@ if (process.env.ANTHROPIC_API_KEY) {
   });
 }
 
+// Authentication token for the proxy. If the user already provided an
+// ANTHROPIC_AUTH_TOKEN or ANTHROPIC_API_KEY, reuse it so Claude sends it as
+// Authorization: Bearer / X-Api-Key. Otherwise generate an ephemeral token and
+// inject it only into the spawned Claude process.
+const proxyAuthToken =
+  process.env.ANTHROPIC_AUTH_TOKEN ??
+  process.env.ANTHROPIC_API_KEY ??
+  randomUUID();
+
+const proxyAuthHeaderName = process.env.ANYCLAUDE_AUTH_HEADER ?? "X-AnyClaude-Token";
+
 const proxyURL = createAnthropicProxy({
   providers,
+  host: "127.0.0.1",
+  authToken: proxyAuthToken,
+  authHeaderName: proxyAuthHeaderName,
 });
 
 if (process.env.PROXY_ONLY === "true") {
-  console.log("Proxy only mode: "+proxyURL);
+  console.log("Proxy only mode: " + proxyURL);
 } else {
   const claudeArgs = process.argv.slice(2);
   const proc = spawn("claude", claudeArgs, {
     env: {
       ...process.env,
       ANTHROPIC_BASE_URL: proxyURL,
+      // Ensure the Claude CLI includes our custom header via ANTHROPIC_CUSTOM_HEADERS
+      ANTHROPIC_CUSTOM_HEADERS: (() => {
+        const existing = process.env.ANTHROPIC_CUSTOM_HEADERS;
+        const line = `${proxyAuthHeaderName}: ${proxyAuthToken}`;
+        return existing ? `${existing}\n${line}` : line;
+      })(),
     },
     stdio: "inherit",
   });
   proc.on("exit", (code) => {
     if (claudeArgs[0] === "-h" || claudeArgs[0] === "--help") {
       console.log("\nCustom Models:")
-      console.log("  --model <provider>/<model>      e.g. openai/o3");
+      console.log("  --model <provider>/<model>      e.g. openai/gpt-5-mini");
     }
 
     process.exit(code);
   });
 }
-