scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-05 02:41:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 49

Update litellm/proxy/auth/internal_auth_endpoints.py

Browse source 
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
This commit is contained in:
ishaan-berri 2026-06-24 13:15:28 -07:00 • committed by GitHub
parent 1b0120dc0b
commit 44e84c95bd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 7 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
litellm/proxy/auth/internal_auth_endpoints.py
View file

@ -133,13 +133,15 @@ async def verify_key(body: VerifyKeyRequest) -> dict[str, Any]:
)
synthetic_request = _synthetic_request(
route=body.route, api_key=bearer_key, model=body.model
)
try:
auth = await user_api_key_auth(request=synthetic_request, api_key=bearer_key)
except (ProxyException, HTTPException):
except (ProxyException, HTTPException) as exc:
# Expected auth failures (invalid / expired / over-budget / blocked) → 401
# with a minimal body so internals aren't leaked. Unexpected errors (e.g. a
# DB outage) are deliberately NOT caught here: they surface as 500 rather
# DB outage, misconfigured master key) are deliberately NOT caught here:
# they surface as 500 rather than masquerading as "invalid key". The data
# plane still fails closed — it rejects any non-200 from this endpoint.
if isinstance(exc, HTTPException) and exc.status_code >= 500:
raise # let 5xx propagate so operators can see the real error
raise HTTPException(status_code=401, detail="invalid api key")
# than masquerading as "invalid key". The data plane still fails closed —
# it rejects any non-200 from this endpoint.
raise HTTPException(status_code=401, detail="invalid api key")