scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-10 22:41:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 129

chore(static-assets): keep vault tester out of asset hardening

Browse source
This commit is contained in:
user 2026-04-29 20:56:45 -07:00
parent 14473ed8f9
commit 2c11fa0df3
1 changed files with 2 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
litellm/proxy/management_endpoints/config_override_endpoints.py
View file

@ -391,14 +391,7 @@ async def test_hashicorp_vault_connection(
detail=f"Vault authentication failed: {e}",
)
# Step 2: Verify the token is valid via token/lookup-self.
# ``vault_addr`` is admin-set; wrapping in ``async_safe_get`` prevents
# a misconfigured (or attacker-influenced) value from pivoting the
# request to cloud metadata or another internal IP. Admins running
# against an internal Vault should add the host to
# ``litellm.user_url_allowed_hosts``.
from litellm.litellm_core_utils.url_utils import async_safe_get
# Step 2: Verify the token is valid via token/lookup-self
try:
async_client = get_async_httpx_client(
llm_provider=httpxSpecialProvider.SecretManager
@ -406,7 +399,7 @@ async def test_hashicorp_vault_connection(
lookup_url = f"{client.vault_addr}/v1/auth/token/lookup-self"
if client.vault_namespace:
headers["X-Vault-Namespace"] = client.vault_namespace
response = await async_safe_get(async_client, lookup_url, headers=headers)
response = await async_client.get(lookup_url, headers=headers)
response.raise_for_status()
except Exception as e:
raise HTTPException(