feat: secrets agent-proxy start and connect commands#308

Merged

saifsmailbox98 merged 26 commits into

mainfrom

saif/age2-39-implement-secrets-brokering-infisical-agent-proxy

Jul 14, 2026

Commits on Jul 9, 2026

Commits on Jul 10, 2026

docs: note substring-replacement behavior in credential substitution
saifsmailbox98
committed
refactor: address review feedback for agent proxy
saifsmailbox98
committed
fix: fall back to still-valid intermediate CA when re-sign fails
saifsmailbox98
committed
feat: broker plain-HTTP upstreams via absolute-form forward proxying
saifsmailbox98
committed
fix: skip placeholders of disabled proxied services in connect
saifsmailbox98
committed
fix: break proxied service host-match ties deterministically by name
saifsmailbox98
committed
test: cover credential rewrite surfaces, prefixes, and body edge cases
saifsmailbox98
committed
fix: strip hop-by-hop headers before injecting so credentials always win
saifsmailbox98
committed
feat: merge operator NO_PROXY entries and add --no-proxy flag to connect
saifsmailbox98
committed
fix: force HTTP/1.1 upstream so HTTP/2 responses don't hang the MITM tunnel
saifsmailbox98
committed
fix: authenticate before minting proxy leaf certs and bound leaf cache
saifsmailbox98
committed
fix: pin upstream Host header to the matched authority
saifsmailbox98
committed
chore: trim non-essential comments from agent proxy code
saifsmailbox98
committed

Commits on Jul 11, 2026

feat: expand references and include imports when fetching proxied secrets
saifsmailbox98
committed

Commits on Jul 13, 2026

Commits on Jul 14, 2026