scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-04 02:31:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 69

fix(security): redact logging callback_vars in team info/list endpoints

Browse source
This commit is contained in:
Josh 2026-04-13 10:47:00 -04:00
parent e104f42965
commit 14f9c79cc4
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
litellm/proxy/management_endpoints/team_endpoints.py
View file

@ -69,6 +69,7 @@ from litellm.proxy.auth.auth_checks import (
get_user_object,
)
from litellm.proxy.auth.user_api_key_auth import user_api_key_auth
from litellm.proxy.common_utils.callback_utils import redact_sensitive_logging_metadata
from litellm.proxy.management_endpoints.common_utils import (
_is_user_org_admin_for_team,
_is_user_team_admin,
@ -3154,6 +3155,7 @@ async def team_info(
# if using pydantic v1
key = key.dict()
key.pop("token", None)
key["metadata"] = redact_sensitive_logging_metadata(key.get("metadata"))
## GET ALL MEMBERSHIPS ##
returned_tm = await get_all_team_memberships(
@ -3183,6 +3185,10 @@ async def team_info(
# Resolve resources inherited from access groups
await _resolve_team_access_group_resources(_team_info)
# Scrub credentials from team-level logging config before returning
if _team_info.metadata is not None:
_team_info.metadata = redact_sensitive_logging_metadata(_team_info.metadata)
response_object = TeamInfoResponseObject(
team_id=team_id,
team_info=_team_info,
@ -3535,6 +3541,9 @@ def _convert_teams_to_response_models(
except Exception:
team_dict = team.dict()
team_dict["metadata"] = redact_sensitive_logging_metadata(
team_dict.get("metadata")
)
if use_deleted_table:
team_list.append(LiteLLM_DeletedTeamTable(**team_dict))
else:
@ -3959,9 +3968,13 @@ async def list_team(
)
try:
_team_dict = team.model_dump()
_team_dict["metadata"] = redact_sensitive_logging_metadata(
_team_dict.get("metadata")
)
returned_responses.append(
TeamListResponseObject(
**team.model_dump(),
**_team_dict,
team_memberships=_team_memberships,
keys=keys,
)