scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-11 22:51:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 123

test(mcp): cover deeply nested credential inspection limits

Browse source
This commit is contained in:
Joshua Valluru 2026-09-11 07:32:38 -07:00
parent 5b13dfcc59
commit e8c411fb43
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
tests/test_litellm/proxy/_experimental/mcp_server/test_mcp_debug.py
View file

@ -557,3 +557,15 @@ def test_failure_diagnostics_omit_credential_bearing_url_paths(path):
assert "credential-path-value" not in diagnostic
assert "POST https://upstream.example/ -> HTTP 401" in diagnostic
assert "access_denied" in diagnostic
def test_deep_request_omits_response_when_credentials_cannot_be_inspected():
from litellm.proxy._experimental.mcp_server.utils import MAX_STRUCTURED_CONTENT_SCAN_DEPTH
raw = "[" * (MAX_STRUCTURED_CONTENT_SCAN_DEPTH + 1) + '{"client_secret":"nested-credential"}' + "]" * (MAX_STRUCTURED_CONTENT_SCAN_DEPTH + 1)
request = httpx.Request("POST", "https://upstream/token", content=raw, headers={"Content-Type": "application/json"})
response = httpx.Response(401, request=request, json={"error_description": "Rejected nested-credential"})
detail = describe_upstream_http_failure(httpx.HTTPStatusError("failed", request=request, response=response))
assert detail is not None and "HTTP 401" in detail
assert "response body: (omitted: request credentials unavailable)" in detail
assert "nested-credential" not in detail