scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-11-11 08:38:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 280

test(sso): cover every group claim shape role_mappings accepts

Browse source
This commit is contained in:
Vivek Raj 2026-10-27 11:15:20 +05:30
parent 7923f4cf22
commit e98a5367fe
1 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
tests/unit/proxy/management_endpoints/test_ui_sso.py
View file

@ -34,6 +34,7 @@ from litellm.proxy.management_endpoints.ui_sso import (
normalize_email,
process_sso_jwt_access_token,
read_return_to_cookie,
role_from_role_mappings,
sso_lookup_user_ids,
)
from litellm.types.proxy.management_endpoints.ui_sso import (
@ -483,6 +484,27 @@ def test_get_microsoft_callback_response_applies_role_mappings(
assert result.user_role == expected_role
@pytest.mark.parametrize(
("claims", "expected_role"),
[
pytest.param({"groups": ["grp-b", "grp-a"]}, LitellmUserRoles.PROXY_ADMIN, id="list"),
pytest.param({"groups": "grp-b, grp-a"}, LitellmUserRoles.PROXY_ADMIN, id="comma-separated-string"),
pytest.param({"groups": 42}, LitellmUserRoles.PROXY_ADMIN_VIEW_ONLY, id="single-non-string-value"),
pytest.param({"groups": " , "}, LitellmUserRoles.INTERNAL_USER, id="blank-string-uses-default-role"),
pytest.param({"groups": "grp-z"}, LitellmUserRoles.INTERNAL_USER, id="no-match-uses-default-role"),
],
)
def test_role_from_role_mappings_reads_every_group_claim_shape(claims, expected_role):
role_mappings = RoleMappings(
provider="microsoft",
group_claim="groups",
default_role=LitellmUserRoles.INTERNAL_USER,
roles={LitellmUserRoles.PROXY_ADMIN: ["grp-a"], LitellmUserRoles.PROXY_ADMIN_VIEW_ONLY: ["42"]},
)
assert role_from_role_mappings(claims, role_mappings) == expected_role
def test_get_google_callback_response():
# Arrange
mock_request = MagicMock(spec=Request)