scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-12 23:01:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 182

docs(team_callback_endpoints): correct prose that still described masking on read

Browse source
This commit is contained in:
Yucheng Zhu 2026-08-18 13:35:52 -07:00
parent 433aef58e5
commit 16b1e6e7f6
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
litellm/proxy/management_endpoints/team_callback_endpoints.py
View file

@ -125,7 +125,7 @@ def _resolve_team_callbacks(team_metadata: object) -> TeamCallbackMetadata:
entry as active for a team whose requests never fire it.
Credential ``callback_vars`` are stored encrypted, so they are decrypted
before being masked by key; a value encrypted under a key that is no longer
before being dropped by key; a value encrypted under a key that is no longer
classified as sensitive would otherwise come back as raw ciphertext.
"""
if not isinstance(team_metadata, dict):

4
tests/test_litellm/proxy/management_endpoints/test_team_callback_endpoints.py
View file

@ -687,14 +687,14 @@ async def test_get_team_callbacks_decrypts_vars_stored_under_non_sensitive_keys(
"""Stored ciphertext must be decrypted, not handed back raw.
Which keys count as sensitive is a moving classification, so a value can be
encrypted at rest under a key that later stops being masked on read. Without
encrypted at rest under a key that later stops being dropped on read. Without
the decrypt step that value comes back as an unusable litellm_enc:: blob.
"""
from litellm.proxy.common_utils.callback_utils import _CALLBACK_VAR_ENCRYPTED_PREFIX, is_sensitive_callback_key
from litellm.proxy.common_utils.encrypt_decrypt_utils import encrypt_value_helper
monkeypatch.setenv("LITELLM_SALT_KEY", "test-salt-32-bytes-aaaaaaaaaaaaaa")
assert not is_sensitive_callback_key("langsmith_project"), "test needs a key that is not masked on read"
assert not is_sensitive_callback_key("langsmith_project"), "test needs a key that is not dropped on read"
metadata = {
"logging": [