🔍 refactor: OpenID Fetch Handling and Logging

[danny-avila]

Summary

I enhanced the OpenID authentication strategy with advanced debug logging, improved proxy and header handling, and migrated its fetch logic to use undici for reliability and standards compliance.

• Refactored the OpenID strategy to use undici as the fetch implementation, ensuring correct proxy support and detailed debug logging of requests and responses.
• Introduced a new global fetch handler with masked logging for requests, responses, headers, and bodies, and robust handling for non-standard WWW-Authenticate headers.
• Added helper functions safeStringify and logHeaders to mask and safely serialize sensitive data, reused across logging operations.
• Enhanced memory viewer layout with conditional justification using the cn utility for improved UX and style management.

Other changes

I also exported the files module in the utils index to improve TypeScript module usability and coverage. Finally, I developed a comprehensive test suite covering multer file storage, filename generation, filtering logic, cryptographic UUIDs, edge case handling, and integration with real file configuration.

• Exported the files module from utils/index.ts to fix missing export and support downstream usage.
• Added node-fetch as an explicit dependency to support OpenID image downloads for compatibility across the codebase.
• Created a thorough Jest test suite for multer: testing storage paths, sanitized/unique filenames, file filters, edge case errors (including CVEs), UUID cryptography, and integration with live config endpoints.
• Verified file system error handling for directory creation and filename sanitization edge cases to mitigate vulnerabilities and DoS attacks.

Relevant docs (also includes Memories changes): LibreChat-AI/librechat.ai#322

Change Type

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Documentation update
• Breaking change (requires Node.js with undici, and changes some fetch internals)

Testing

The test suite for multer was run locally and via the CI pipeline using Jest and covers:

• Storage destination creation and path integrity checks.
• Filename generation (sanitization, truncation, Unicode, URI encoding, uniqueness, and error edge cases).
• JSON file filtering (mimetype and extension checks) and rejection of invalid types.
• Real-world config and endpoint type validation using actual data-provider utility methods.
• Cryptographic UUID testing for formatting, security, and unique generation.
• Error handling for file system permission issues, malformed requests, and vulnerabilities such as CVE-2024-28870.

Test Configuration:

• Node.js ^20.19.0
• Jest
• Manual tests with OpenID authentication and debug logging enabled to verify logging and proxy effects

Checklist

• My code adheres to this project's style guidelines
• I have performed a self-review of my own code
• I have commented in any complex areas of my code
• I have made pertinent documentation changes
• My changes do not introduce new warnings
• I have written tests demonstrating that my changes are effective or that my feature works
• Local unit tests pass with my changes
• Any changes dependent on mine have been merged and published in downstream modules.