scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-28 06:23:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 94

fix(mcp): narrow master_key before the legacy session key derivation
Some checks failed
LiteLLM Rust / rust-lint (push) Has been cancelled
Details
LiteLLM Rust / rust-test (push) Has been cancelled
Details
LiteLLM Rust / rust-wheel (push) Has been cancelled
Details
Terraform Modules / fmt, validate, test (aws) (push) Has been cancelled
Details
Terraform Provider / gofmt, vet, build, test (push) Has been cancelled
Details
Terraform Provider / Provider endpoints vs proxy OpenAPI schema (push) Has been cancelled
Details
Terraform Modules / fmt, validate, test (gcp) (push) Has been cancelled
Details

Browse source 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
This commit is contained in:
yucheng 2026-10-15 05:35:25 +00:00
parent 4aa0bc024f
commit a806e94246
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
litellm/proxy/_experimental/mcp_server/gateway_dcr_flow.py
View file

@ -1382,7 +1382,9 @@ async def aggregate_token(
resource=resource,
signing=signing,
issue=issue,
legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys),
legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys)
if master_key is not None
else None,
)
if grant_type == TOKEN_EXCHANGE_GRANT_TYPE:
return await _token_exchange_grant(
@ -1631,7 +1633,10 @@ async def refresh_proxy_credential(
if isinstance(signing, Response):
return signing
opened: Final = _open_presented_refresh_token(
refresh_token, client_id, signing, legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys)
refresh_token,
client_id,
signing,
legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys) if master_key is not None else None,
)
if isinstance(opened, Response):
return opened
@ -1706,7 +1711,7 @@ async def revoke_session_refresh_token(
signing.keys,
signing.now,
expected_client_id=client_id,
legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys),
legacy_keys=legacy_session_keys_from_master_key(master_key, signing.keys) if master_key is not None else None,
)
if isinstance(opened, SessionRefreshOpened):
guard: Final = _SingleUseGuard(cache)