scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-07 08:26:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 89

Merge pull request #39027 from BerriAI/litellm_/qa-checklist-e2e-audit-952d1d

Browse source 
test(e2e): cover SCIM token creation and SCIM API auth in the Admin UI suite
This commit is contained in:
yuneng-jiang 2026-08-31 15:45:23 -07:00 • committed by GitHub
commit 68c8d5ca28
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 53 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

53
tests/e2e/ui/tests/settings/scim.spec.ts Normal file
View file

@ -0,0 +1,53 @@
import { test, expect, Page as PlaywrightPage } from "@playwright/test";
import { ADMIN_STORAGE_PATH } from "../../constants";
import { Page } from "../../fixtures/pages";
import { navigateToPage } from "../../helpers/navigation";
const rootPath = (): string => process.env.SERVER_ROOT_PATH ?? "";
async function createScimTokenViaUi(page: PlaywrightPage, alias: string): Promise<string> {
await navigateToPage(page, Page.AdminPanel);
await page.getByRole("tab", { name: "SCIM" }).click();
await expect(page.getByText("SCIM Tenant URL")).toBeVisible();
await expect(page.locator("input[disabled]").first()).toHaveValue(/\/scim\/v2$/);
await page.getByLabel("Token Name").fill(alias);
await page.getByRole("button", { name: "Create SCIM Token" }).click();
await expect(page.getByText(/copy this token now/i)).toBeVisible({ timeout: 15_000 });
const token = await page.locator('input[type="password"]').inputValue();
expect(token, "the one-time token panel shows a usable virtual key").toMatch(/^sk-/);
return token;
}
test.describe("Admin Settings - SCIM", () => {
test.use({ storageState: ADMIN_STORAGE_PATH });
test("Create SCIM Token shows the token once and offers to create another", async ({ page }) => {
await createScimTokenViaUi(page, `e2e-scim-ui-${Date.now()}`);
await page.getByRole("button", { name: "Create Another Token" }).click();
await expect(page.getByRole("button", { name: "Create SCIM Token" })).toBeVisible();
await expect(page.getByText(/copy this token now/i)).toBeHidden();
});
test("a UI-minted SCIM token authorizes the SCIM API", async ({ page, request }) => {
test.skip(!process.env.LITELLM_LICENSE, "LITELLM_LICENSE not set in test env — /scim/v2 is premium-gated");
const token = await createScimTokenViaUi(page, `e2e-scim-api-${Date.now()}`);
const denied = await request.get(`${rootPath()}/scim/v2/Groups`, {
headers: { Authorization: "Bearer sk-not-a-real-key" },
});
expect(denied.status(), "an unknown key must not reach SCIM").toBe(401);
const res = await request.get(`${rootPath()}/scim/v2/Groups`, {
headers: { Authorization: `Bearer ${token}` },
});
expect(res.status(), `SCIM Groups listing failed: ${await res.text()}`).toBe(200);
const body = await res.json();
expect(body.schemas, "SCIM answers with a ListResponse").toContain("urn:ietf:params:scim:api:messages:2.0:ListResponse");
expect(Array.isArray(body.Resources), "SCIM ListResponse carries a Resources array").toBe(true);
});
});