From 8e3755931ddbd6aff21f064a424d64bdc0139204 Mon Sep 17 00:00:00 2001
From: Ryan Crabbe <ryan@berri.ai>
Date: Fri, 27 Mar 2026 16:50:58 -0700
Subject: [PATCH] test(auth): add regression tests for JWTHandler.is_jwt(None)

Add None-token test cases to both proxy_unit_tests and test_litellm
to cover the guard added in the previous commit. Also add -> bool
return type annotation to is_jwt().
---
 litellm/proxy/auth/handle_jwt.py                        | 2 +-
 tests/proxy_unit_tests/test_jwt.py                      | 3 +++
 tests/test_litellm/proxy/auth/test_user_api_key_auth.py | 4 ++++
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/litellm/proxy/auth/handle_jwt.py b/litellm/proxy/auth/handle_jwt.py
index 86f7d614b95..48bbd8e2150 100644
--- a/litellm/proxy/auth/handle_jwt.py
+++ b/litellm/proxy/auth/handle_jwt.py
@@ -89,7 +89,7 @@ class JWTHandler:
         self.leeway = leeway
 
     @staticmethod
-    def is_jwt(token: Optional[str]):
+    def is_jwt(token: Optional[str]) -> bool:
         if token is None:
             return False
         parts = token.split(".")
diff --git a/tests/proxy_unit_tests/test_jwt.py b/tests/proxy_unit_tests/test_jwt.py
index 24cf15a3214..a5be1a3a42d 100644
--- a/tests/proxy_unit_tests/test_jwt.py
+++ b/tests/proxy_unit_tests/test_jwt.py
@@ -1331,6 +1331,9 @@ def test_jwt_handler_is_jwt_static_method():
     # Test with empty string
     assert JWTHandler.is_jwt("") == False
 
+    # Test with None (missing Authorization header)
+    assert JWTHandler.is_jwt(None) == False
+
 
 @pytest.mark.parametrize(
     "requested_model, should_work",
diff --git a/tests/test_litellm/proxy/auth/test_user_api_key_auth.py b/tests/test_litellm/proxy/auth/test_user_api_key_auth.py
index 81ca758983b..6e000f9c0e3 100644
--- a/tests/test_litellm/proxy/auth/test_user_api_key_auth.py
+++ b/tests/test_litellm/proxy/auth/test_user_api_key_auth.py
@@ -567,6 +567,10 @@ class TestJWTOAuth2Coexistence:
         assert JWTHandler.is_jwt("Bearer token") is False
         assert JWTHandler.is_jwt("two.parts") is False
 
+    def test_is_jwt_returns_false_for_none(self):
+        """None token (missing Authorization header) should not be treated as JWT."""
+        assert JWTHandler.is_jwt(None) is False
+
     @pytest.mark.asyncio
     async def test_both_enabled_opaque_token_uses_oauth2(self):
         """