scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-25 05:54:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 125

test(logging): cover module-level get_standard_logging_metadata sanitizer call-site

Browse source
This commit is contained in:
yryzhan-vitech 2026-07-26 16:36:05 +02:00
parent 349ef4ca42
commit 12ce89e5be
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
tests/test_litellm/litellm_core_utils/test_litellm_logging.py
View file

@ -4229,3 +4229,18 @@ def test_get_standard_logging_metadata_non_string_hash_unchanged():
{"user_api_key_hash": 12345}
)
assert result["user_api_key_hash"] == 12345
def test_module_level_get_standard_logging_metadata_raw_sk_key_is_hashed():
"""
SECURITY: the module-level get_standard_logging_metadata builder must also
hash a raw sk- key under user_api_key_hash (second sanitizer call-site).
"""
import hashlib
from litellm.litellm_core_utils.litellm_logging import get_standard_logging_metadata
raw_key = "sk-1234567890abcdefghijklmnop"
result = get_standard_logging_metadata({"user_api_key_hash": raw_key})
assert result["user_api_key_hash"] == hashlib.sha256(raw_key.encode()).hexdigest()
assert not str(result["user_api_key_hash"]).startswith("sk-")