feat: credential injection via --inject-header - #1

Open

pjcdawkins wants to merge 30 commits into

mainfrom

credential-injection

Commits on Sep 2, 2026

feat: host-bound credential injection (--inject-bearer/--inject-header)

pjcdawkins
and
claude
committed
7fee59a
feat: respect a user-provided ALL_PROXY

pjcdawkins
and
claude
committed
4ad0439
fix: harden credential-injection host handling

pjcdawkins
and
claude
committed
c2e1b8c
fix: address second-round credential-injection review

pjcdawkins
and
claude
committed
e0e4c0c
fix: address third-round credential-injection review

pjcdawkins
and
claude
committed
e80a0fd
doc: correct --inject-bearer description in CLAUDE.md

pjcdawkins
and
claude
committed
d5ecb70
refactor: header-agnostic credential injection via ENV_VAR=HOST

pjcdawkins
and
claude
committed
07846aa
fix: address credential-injection review

pjcdawkins
and
claude
committed
2c26843
refactor: simplify credential-injection comments and drop "sealing" term

pjcdawkins
and
claude
committed
0bb8428
refactor: deduplicate credential-injection helpers

pjcdawkins
and
claude
committed
3f6d24a
fix: support credential injection on macOS

pjcdawkins
authored and
claude
committed
d77b408
fix: address credential-injection review findings

pjcdawkins
and
claude
committed
f9b62c7
feat: extend --inject-header with colon syntax, ports, IPs, host lists

pjcdawkins
and
claude
committed
d5ef91b
fix: address credential-injection review round

pjcdawkins
and
claude
committed
4a916b5
fix: address credential injection regressions

pjcdawkins
authored and
claude
committed
57bfddf
fix: address credential injection regressions

pjcdawkins
authored and
claude
committed
ed44cf9
fix: renew injected certificates for long sessions

pjcdawkins
authored and
claude
committed
8426f8b
fix: address credential-injection review findings

pjcdawkins
and
claude
committed
e1fccd6
refactor: apply cleanup review to credential injection

pjcdawkins
and
claude
committed
5bec3c2
fix: address review comments on CA base precedence and bracketed IPv6

pjcdawkins
and
claude
committed
90a122a
fix: authorize injection targets before the proxy-requirement check

pjcdawkins
and
claude
committed
f5de02b
test: add end-to-end coverage for injection binding scope and opt-out

pjcdawkins
and
claude
committed
4d327f4
test: make Expect: 100-continue test deterministic; close idle test conns

pjcdawkins
and
claude
committed
73af016
fix: address Copilot review comments on injection opt-out and env hint

pjcdawkins
and
claude
committed
53dbd63
refactor: share --env wildcard handling between flags and CURB_ENV

pjcdawkins
and
claude
committed
859d6be
refactor: simplify credential injection internals

pjcdawkins
and
claude
committed
854ec6a
fix: address Copilot review comments on the injection proxy

pjcdawkins
and
claude
committed
0f22de7
style: apply go fix to the injection proxy tests
claude
committed
99ba9a9
fix: address review findings on credential injection
claude
committed
d316bbf
fix: name host:port in the CONNECT injection log events
claude
committed
580173e

Navigation Menu

feat: credential injection via --inject-header - #1

feat: credential injection via --inject-header#1
pjcdawkins wants to merge 30 commits into
mainfrom
credential-injection

Commits on Sep 2, 2026

feat: host-bound credential injection (--inject-bearer/--inject-header)

feat: respect a user-provided ALL_PROXY

fix: harden credential-injection host handling

fix: address second-round credential-injection review

fix: address third-round credential-injection review

doc: correct --inject-bearer description in CLAUDE.md

refactor: header-agnostic credential injection via ENV_VAR=HOST

fix: address credential-injection review

refactor: simplify credential-injection comments and drop "sealing" term

refactor: deduplicate credential-injection helpers

fix: support credential injection on macOS

fix: address credential-injection review findings

feat: extend --inject-header with colon syntax, ports, IPs, host lists

fix: address credential-injection review round

fix: address credential injection regressions

fix: address credential injection regressions

fix: renew injected certificates for long sessions

fix: address credential-injection review findings

refactor: apply cleanup review to credential injection

fix: address review comments on CA base precedence and bracketed IPv6

fix: authorize injection targets before the proxy-requirement check

test: add end-to-end coverage for injection binding scope and opt-out

test: make Expect: 100-continue test deterministic; close idle test conns

fix: address Copilot review comments on injection opt-out and env hint

refactor: share --env wildcard handling between flags and CURB_ENV

refactor: simplify credential injection internals

fix: address Copilot review comments on the injection proxy

style: apply go fix to the injection proxy tests

fix: address review findings on credential injection

fix: name host:port in the CONNECT injection log events