scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-08 22:21:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 78

feat(ui): disclaim that the Update API Key modal only rotates api_key (#31805)
Some checks are pending
GitHub Actions Security Analysis / zizmor (push) Waiting to run
Details

Browse source 
* feat(ui): disclaim that the Update API Key modal only rotates api_key

An adversarial review of the credential-rotation work noted the modal always
writes litellm_params.api_key, so models that authenticate with an Azure AD
token, AWS credentials, or a Vertex service-account JSON are not rotated by it.
Adds a warning Alert to the modal so users are not misled into thinking those
secrets were rotated; broadening the modal to those providers is a follow-up

* Update ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

* style(ui): prettier-format the credential modal

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
This commit is contained in:
ryan-crabbe-berri 2026-07-01 10:25:32 -07:00 • committed by GitHub
parent e141596204
commit 3e0bd71ee9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
ui/litellm-dashboard/src/components/update_model_credentials_modal.tsx
View file

@ -1,4 +1,4 @@
import { Button, Form, Input, Modal, Typography } from "antd";
import { Alert, Button, Form, Input, Modal, Typography } from "antd";
import { useState } from "react";
import { modelPatchUpdateCall } from "./networking";
import NotificationsManager from "./molecules/notifications_manager";
@ -56,8 +56,15 @@ export default function UpdateModelCredentialsModal({
return (
<Modal title="Update API Key" open={open} onCancel={close} footer={null} width={520} destroyOnHidden={true}>
<Text className="block mb-4 text-gray-500">
Rotate this model&apos;s API key. Only the new key is sent; the rest of the deployment is left untouched.
Update this model&apos;s API key. Only the new key is sent; the rest of the deployment configuration is left
untouched.
</Text>
<Alert
type="warning"
showIcon
className="mb-4"
message="Only the API key is rotated here. Models that authenticate with an Azure AD token, AWS credentials, or a Vertex service-account JSON aren't supported yet; update those from the model's LiteLLM Params for now."
/>
<Form form={form} onFinish={handleSubmit} layout="vertical">
<Form.Item label="New API Key" name="api_key" rules={[{ required: true, message: "Enter a new API key" }]}>
<Input.Password placeholder="Enter the new API key" autoComplete="new-password" />