fix(openai): allow fake-IP Realtime requests (#86526)

shushushv · steipete · web-flow · commit a596ca1795b6 · 2026-07-07T05:48:57.000+01:00
Co-authored-by: Peter Steinberger &lt;steipete@gmail.com&gt;
diff --git a/extensions/openai/realtime-provider-shared.ts b/extensions/openai/realtime-provider-shared.ts
@@ -6,13 +6,20 @@ import {
   resolveProviderRequestHeaders,
 } from "openclaw/plugin-sdk/provider-http";
 import { captureWsEvent } from "openclaw/plugin-sdk/proxy-capture";
-import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
+import { fetchWithSsrFGuard, type SsrFPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import {
   asFiniteNumber,
   asOptionalRecord as asObjectRecord,
   normalizeOptionalString,
 } from "openclaw/plugin-sdk/string-coerce-runtime";
 
+const OPENAI_REALTIME_API_BASE_URL = "https://api.openai.com/v1";
+const OPENAI_REALTIME_SSRF_POLICY = {
+  allowRfc2544BenchmarkRange: true,
+  allowIpv6UniqueLocalRange: true,
+  hostnameAllowlist: [new URL(OPENAI_REALTIME_API_BASE_URL).hostname],
+} satisfies SsrFPolicy;
+
 export const trimToUndefined = normalizeOptionalString;
 export { asFiniteNumber, asObjectRecord };
 
@@ -104,6 +111,7 @@ async function createOpenAIRealtimeSecret(
       },
       body: JSON.stringify(params.body),
     },
+    policy: OPENAI_REALTIME_SSRF_POLICY,
     auditContext: params.auditContext,
   });
   const payload = await (async () => {
@@ -140,7 +148,7 @@ export async function createOpenAIRealtimeClientSecret(params: {
   auditContext: string;
   session: Record<string, unknown>;
 }): Promise<OpenAIRealtimeClientSecretResult> {
-  const url = "https://api.openai.com/v1/realtime/client_secrets";
+  const url = `${OPENAI_REALTIME_API_BASE_URL}/realtime/client_secrets`;
   return createOpenAIRealtimeSecret({
     ...params,
     url,
@@ -155,7 +163,7 @@ export async function createOpenAIRealtimeTranscriptionClientSecret(params: {
   auditContext: string;
   session: Record<string, unknown>;
 }): Promise<OpenAIRealtimeClientSecretResult> {
-  const url = "https://api.openai.com/v1/realtime/transcription_sessions";
+  const url = `${OPENAI_REALTIME_API_BASE_URL}/realtime/transcription_sessions`;
   return createOpenAIRealtimeSecret({
     ...params,
     url,
diff --git a/extensions/openai/realtime-transcription-provider.test.ts b/extensions/openai/realtime-transcription-provider.test.ts
@@ -240,6 +240,11 @@ describe("buildOpenAIRealtimeTranscriptionProvider", () => {
     const request = mockCallArg(ssrfMocks.fetchWithSsrFGuard);
     expect(request.auditContext).toBe("openai-realtime-transcription-session");
     expect(request.url).toBe("https://api.openai.com/v1/realtime/transcription_sessions");
+    expect(request.policy).toEqual({
+      allowRfc2544BenchmarkRange: true,
+      allowIpv6UniqueLocalRange: true,
+      hostnameAllowlist: ["api.openai.com"],
+    });
     const init = request.init as {
       method?: string;
       headers?: Record<string, string>;
diff --git a/extensions/openai/realtime-voice-provider.test.ts b/extensions/openai/realtime-voice-provider.test.ts
@@ -525,6 +525,11 @@ describe("buildOpenAIRealtimeVoiceProvider", () => {
 
     expectRecordFields(requireFetchRequest(), "fetch request", {
       url: "https://api.openai.com/v1/realtime/client_secrets",
+      policy: {
+        allowRfc2544BenchmarkRange: true,
+        allowIpv6UniqueLocalRange: true,
+        hostnameAllowlist: ["api.openai.com"],
+      },
     });
     expectRecordFields(requireFetchInit(), "fetch init", { method: "POST" });
     expectRecordFields(requireFetchHeaders(), "fetch headers", {
