mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-06 02:48:13 +00:00
48b5a5a0cc
The repo linted at 120 (E501, isort) but ran ruff format at 88 via a --line-length 88 override in the Makefile and CI, leaving the formatter and the linter disagreeing on wrap width. Drop the override so ruff.toml's line-length = 120 is the single source of truth and reformat the tree to match.
44 lines
1.6 KiB
Python
44 lines
1.6 KiB
Python
"""
|
|
Example Custom SSO Handler
|
|
|
|
Use this if you want to run custom code after litellm has retrieved information from your IDP (Identity Provider).
|
|
|
|
Flow:
|
|
- User lands on Admin UI
|
|
- LiteLLM redirects user to your SSO provider
|
|
- Your SSO provider redirects user back to LiteLLM
|
|
- LiteLLM has retrieved user information from your IDP
|
|
- Your custom SSO handler is called and returns an object of type SSOUserDefinedValues
|
|
- User signed in to UI
|
|
"""
|
|
|
|
from fastapi_sso.sso.base import OpenID
|
|
|
|
from litellm.proxy._types import LitellmUserRoles, SSOUserDefinedValues
|
|
from litellm.proxy import proxy_server
|
|
|
|
|
|
async def custom_sso_handler(userIDPInfo: OpenID) -> SSOUserDefinedValues:
|
|
try:
|
|
if userIDPInfo.id is None:
|
|
raise ValueError(f"No ID found for user. userIDPInfo.id is None {userIDPInfo}")
|
|
|
|
# Access extra fields from the IDP response (requires GENERIC_USER_EXTRA_ATTRIBUTES env var)
|
|
# Example: Set GENERIC_USER_EXTRA_ATTRIBUTES="group,NTID,domain" to capture these fields
|
|
# extra_fields = getattr(userIDPInfo, 'extra_fields', None) or {}
|
|
# user_groups = extra_fields.get("group", [])
|
|
|
|
# check if user exists in litellm proxy DB
|
|
if proxy_server.prisma_client is not None:
|
|
_user_info = await proxy_server.prisma_client.get_data(user_id=userIDPInfo.id)
|
|
|
|
return SSOUserDefinedValues(
|
|
models=[],
|
|
user_id=userIDPInfo.id,
|
|
user_email=userIDPInfo.email,
|
|
user_role=LitellmUserRoles.INTERNAL_USER.value,
|
|
max_budget=10,
|
|
budget_duration="1d",
|
|
)
|
|
except Exception:
|
|
raise Exception("Failed custom auth")
|