scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-28 01:32:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 95

fix(custom_hooks): redact x-trust token after verification to prevent replay

Browse source 
Redact x-trust token from metadata after verification.
This commit is contained in:
htl-syterme 2026-09-11 00:52:07 +00:00 • committed by GitHub
parent dde6943d37
commit 02f08956a6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
litellm/proxy/custom_hooks/x_trust_hook.py
View file

@ -59,6 +59,9 @@ class XTrustHook(CustomLogger):
payload = self._verify(token) if token else None
score = payload["score"] if payload else 0.0
trusted = payload is not None and score >= self.min_score
# Redact token after verification to prevent replay via logging
if "headers" in data.get("metadata", {}):
data["metadata"]["headers"].pop("x-trust", None)
if "metadata" not in data:
data["metadata"] = {}
data["metadata"]["x_trust"] = {