mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-12 23:01:41 +00:00
Render the "Delegate auth to upstream (PKCE passthrough)" toggle inside the OAuth fields, right after the OAuth Flow Type selector and only for the Interactive (PKCE) flow, instead of leaving it floating at the bottom of the form or buried in the Permission Management / Access Control section. It now sits next to the OAuth config it controls in both the create and edit MCP server forms. When the toggle is on, show a short notice explaining that clients authenticate directly with the upstream MCP server, that LiteLLM won't enforce its own API key/SSO on this route, and that it won't store user credentials, so the endpoint is reachable without a LiteLLM login. The existing internal-network warning still shows when passthrough is on for an internal-only server. The toggle, the passthrough notice, and the internal-network warning live in a single prop-less DelegateAuthToUpstreamField component that reads everything from the form, shared by both forms. Because the toggle is only mounted for the Interactive OAuth flow, the safety that forces the flag back to false for M2M or non-oauth2 auth happens at submit time in both forms; switching transport to stdio also clears it in handleTransportChange so the form store stays consistent. The separate none-auth oauth_passthrough toggle in the Permission Management section is unrelated and left untouched. |
||
|---|---|---|
| .. | ||
| litellm-dashboard | ||
| Dockerfile | ||
| nginx.conf | ||