scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-10 22:41:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 83

test(ui): add tests for role-based guardrails access in key info view

Browse source
This commit is contained in:
Ishaan Jaffer 2026-03-04 14:49:51 -08:00
parent b57f55276f
commit 4595a06e4d
1 changed files with 57 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

62
ui/litellm-dashboard/src/components/templates/KeyInfoView.handleKeyUpdate.test.tsx
View file

@ -259,6 +259,14 @@ vi.mock("@/app/(dashboard)/hooks/uiSettings/useUISettings", () => ({
useUISettings: vi.fn().mockReturnValue({ data: { values: {} }, isLoading: false }),
}));
// Mock useResetKeySpend hook (requires QueryClientProvider which is not available in this test)
vi.mock("@/app/(dashboard)/hooks/keys/useResetKeySpend", () => ({
useResetKeySpend: vi.fn().mockReturnValue({
mutate: vi.fn(),
isPending: false,
}),
}));
// KeyEditView mock: triggers onSubmit with our injected form values
vi.mock("./key_edit_view", async () => {
const React = await import("react");
@ -334,9 +342,29 @@ beforeEach(() => {
});
// ---- Tests ----
describe("KeyInfoView handleKeyUpdate premium guard", () => {
it("removes guardrails & prompts for non-premium users and prevents metadata.guardrails", async () => {
renderView(false); // premiumUser = false
describe("KeyInfoView handleKeyUpdate guardrails guard", () => {
it("should remove guardrails & prompts for non-premium key owner without write access role", async () => {
const keyDataWithOwner = { ...baseKeyData, user_id: "user_1" };
mockUseAuthorized.mockReturnValue({
accessToken: "access_abc",
userId: "user_1",
userRole: "viewer",
premiumUser: false,
token: "token_123",
userEmail: "test@example.com",
disabledPersonalKeyCreation: false,
showSSOBanner: false,
});
render(
<KeyInfoView
keyId="tok_123"
onClose={() => {}}
keyData={keyDataWithOwner as any}
onKeyDataUpdate={() => {}}
teams={[]}
/>,
);
fireEvent.click(screen.getByText("Settings"));
fireEvent.click(screen.getByText("Edit Settings"));
@ -344,7 +372,7 @@ describe("KeyInfoView handleKeyUpdate premium guard", () => {
token: "tok_123",
guardrails: ["gr-1", "gr-2"],
prompts: ["fast", "safe"],
metadata: {}, // object form (not JSON string)
metadata: {},
};
fireEvent.click(screen.getByText("Mock Submit"));
@ -360,7 +388,31 @@ describe("KeyInfoView handleKeyUpdate premium guard", () => {
expect(sentPayload.key).toBe("tok_123");
});
it("preserves guardrails & prompts for premium users and includes metadata.guardrails", async () => {
it("should preserve guardrails & prompts for non-premium users with write access role (e.g. Admin)", async () => {
renderView(false); // premiumUser = false, userRole = "Admin"
fireEvent.click(screen.getByText("Settings"));
fireEvent.click(screen.getByText("Edit Settings"));
(globalThis as any).__TEST_FORM_VALUES = {
token: "tok_123",
guardrails: ["gr-1"],
prompts: ["fast"],
metadata: {},
};
fireEvent.click(screen.getByText("Mock Submit"));
await waitFor(() => expect(keyUpdateCallMock).toHaveBeenCalled());
const [, sentPayload] = keyUpdateCallMock.mock.calls[0];
expect(sentPayload.guardrails).toEqual(["gr-1"]);
expect(sentPayload.prompts).toEqual(["fast"]);
expect(sentPayload.metadata?.guardrails).toEqual(["gr-1"]);
expect(sentPayload.key).toBe("tok_123");
});
it("should preserve guardrails & prompts for premium users and includes metadata.guardrails", async () => {
renderView(true); // premiumUser = true
fireEvent.click(screen.getByText("Settings"));