scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-10 03:28:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 86

refactor(e2e): name the interactive OAuth test as the list-and-call happy path it exercises

Browse source
This commit is contained in:
Tin Chi Lo 2026-07-15 13:35:38 -07:00
parent 6c0d405ef4
commit 9fb7271ac6
1 changed files with 11 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
tests/e2e/mcp/test_mcp_oauth_interactive_e2e.py
View file

@ -48,11 +48,20 @@ GUARDED_STUB_TOOLS = ("echo", "recorded_headers")
class TestMcpOauthAuthorizationCode:
"""An authorization_code server challenges unauthenticated sessions, runs
the full interactive dance with a real MCP host, and serves tools with the
per-user token the gateway obtained from the IdP."""
per-user token the gateway obtained from the IdP.
There is deliberately no authorization-bearer twin of this test: the OAuth
token owns the `Authorization` header on MCP traffic, so the virtual key
must ride `x-litellm-api-key`. A key presented in `Authorization` instead
never even reaches the dance on current gateways: any bearer there skips
the pre-session 401 challenge and the session is served a masked, empty
tool list, so an OAuth-capable host (which engages on 401) never starts
authorizing. That gap is a known product issue, reproduced live while
building this test; when it is fixed, the twin belongs here."""
@pytest.mark.covers("mcp.list_tools.oauth.completes_authorization_code_flow")
@pytest.mark.covers("mcp.call_tool.oauth.uses_per_user_token")
def test_challenge_then_authorization_code_dance_reaches_tools(
def test_list_and_call_tools_with_x_litellm_api_key_header(
self, client: McpClient, resources: ResourceManager
) -> None:
marker = unique_marker()