From 371a0e6f59ac167441febb20ce3c2eaa74c2fed4 Mon Sep 17 00:00:00 2001 From: Julio Quinteros Pro Date: Wed, 25 Feb 2026 19:18:36 -0300 Subject: [PATCH] fix(auth): remove hardcoded base64 string flagged by secret scanner (#22125) Replace literal Base64-encoded example value in docstring with a placeholder to prevent GitGuardian/ggshield from flagging it as a leaked Basic Authentication credential in container scans. Co-authored-by: Claude Opus 4.6 --- litellm/proxy/auth/user_api_key_auth.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/litellm/proxy/auth/user_api_key_auth.py b/litellm/proxy/auth/user_api_key_auth.py index 9240d84db83..6106f69ea65 100644 --- a/litellm/proxy/auth/user_api_key_auth.py +++ b/litellm/proxy/auth/user_api_key_auth.py @@ -395,10 +395,8 @@ async def check_api_key_for_custom_headers_or_pass_through_endpoints( endpoint.get("custom_auth_parser") is not None and endpoint.get("custom_auth_parser") == "langfuse" ): - """ - - langfuse returns {'Authorization': 'Basic YW55dGhpbmc6YW55dGhpbmc'} - - check the langfuse public key if it contains the litellm api key - """ + # langfuse returns {'Authorization': 'Basic '} + # check the langfuse public key if it contains the litellm api key import base64 api_key = api_key.replace("Basic ", "").strip()