litellm/tests/unit/proxy/auth
Jesus Velarde 07d58de9db
Some checks are pending
Cost map pins recheck / rerun-cost-map-guard (push) Waiting to run
LiteLLM Rust DB / db-queries (push) Waiting to run
LiteLLM Rust / rust-lint (push) Waiting to run
LiteLLM Rust / rust-test (push) Waiting to run
LiteLLM Rust / rust-wheel (push) Waiting to run
Terraform Modules / fmt, validate, test (aws) (push) Waiting to run
Terraform Modules / fmt, validate, test (gcp) (push) Waiting to run
Terraform Provider / gofmt, vet, build, test (push) Waiting to run
Terraform Provider / Provider endpoints vs proxy OpenAPI schema (push) Waiting to run
fix(proxy): reject a client model_id for every provider unless the deployment opts in
A body model_id picks what runs upstream for Bedrock (model or inference
profile), SageMaker (inference component) and Vertex (private endpoint),
while auth, logs and spend see the deployment's model. Ban it on LLM routes
for every provider, unlocked only by configurable_clientside_auth_params on
each deployment the request can reach. The proxy-wide
allow_client_side_credentials flag no longer unlocks it.

metadata.model_id stays allowed since nothing reads it from metadata.
Admin routes keep model_id as a deployment id.
2026-11-13 18:09:41 -08:00
..
__init__.py
test_access_group_rules.py feat(auth): grant access groups through principal attribute rules (#50455) 2026-11-09 13:59:40 -08:00
test_admin_viewer_handler_access.py
test_auth_checks.py feat(redis): serve the proxy's common Redis call with Rust stores (#50170) 2026-11-06 06:01:11 +00:00
test_auth_checks_object_access_and_lookup.py refactor(redis): delete the Python RedisBatch now that every request op is native (#51383) 2026-11-13 03:22:28 +00:00
test_auth_exception_handler.py fix(proxy): preserve caller metadata on auth failures (#51745) 2026-11-13 16:13:50 -08:00
test_auth_hot_path_network_requests.py
test_auth_object_prefetch.py feat(redis): serve the proxy's common Redis call with Rust stores (#50170) 2026-11-06 06:01:11 +00:00
test_auth_utils.py fix(proxy): reject a client model_id for every provider unless the deployment opts in 2026-11-13 18:09:41 -08:00
test_authorization.py
test_banned_params_extra_body.py
test_cli_auth.py
test_custom_auth_end_user_budget.py fix(auth): allow video retrieval after budget exhaustion (#51227) 2026-11-11 17:10:01 -08:00
test_customer_hierarchy_auth.py feat(customer-portal): add free tier limits with Enterprise upgrade path (#51687) 2026-11-13 14:43:15 -05:00
test_customer_member_auto_create.py feat(customer-portal): add free tier limits with Enterprise upgrade path (#51687) 2026-11-13 14:43:15 -05:00
test_customer_spend.py fix(proxy): enforce settled customer budgets across workers (#51568) 2026-11-13 07:33:24 -08:00
test_default_end_user_budget_simple.py
test_fallback_budget.py refactor(router): route the router family through RoutingContext and close the outside surface (#49118) 2026-10-30 19:18:54 -07:00
test_fallback_model_access.py feat(customer-portal): complete hierarchy management (#51521) 2026-11-13 17:58:34 +00:00
test_fallback_rate_limit.py fix(router): re-check and reserve per-model rate limits on fallback targets (#50994) 2026-11-10 16:36:10 -08:00
test_handle_jwt.py feat(auth): grant access groups through principal attribute rules (#50455) 2026-11-09 13:59:40 -08:00
test_info_routes.py
test_jwt.py
test_legacy_empty_models_check.py feat(proxy): log keys and teams still on the deprecated empty models defaults at boot (#50720) 2026-11-10 04:05:25 +00:00
test_litellm_license.py
test_login_utils.py feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874) 2026-11-06 01:31:59 -08:00
test_master_key_boot_check.py
test_mcp_ip_filtering.py refactor(mcp): drop the experimental label from the MCP server and client paths (#48513) 2026-10-27 17:47:50 +00:00
test_model_access_group_budgets.py feat(proxy): customer budget rollup, reset on the budget row's window, named templates, team overrides, multi-window limits and pause_allow_increase (#51582) 2026-11-13 16:05:35 +00:00
test_model_checks.py fix(proxy): list callable ids for partial aliases over a catch-all deployment (#50963) 2026-11-10 22:20:06 -08:00
test_model_checks_fallbacks.py refactor(router): route the router family through RoutingContext and close the outside surface (#49118) 2026-10-30 19:18:54 -07:00
test_models_fallback_endpoint.py refactor(router): move router callers onto the entry points and invert the proxy imports (#48847) 2026-10-29 17:26:33 +00:00
test_multi_budget_windows.py
test_multipart_bypass_repro.py
test_network.py
test_oauth2_proxy_hook.py
test_object_permission_loading.py
test_onboarding.py feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874) 2026-11-06 01:31:59 -08:00
test_organization_budget_enforcement.py
test_password_hashing.py
test_password_policy.py feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874) 2026-11-06 01:31:59 -08:00
test_personal_key_team_model_access.py fix(auth): let dashboard sessions use the user's team models (#51663) 2026-11-13 17:13:06 -05:00
test_proxy_routes.py
test_rds_iam_token.py
test_resolvers_exceptions.py
test_resolvers_grants.py fix(proxy): recheck missing users when resolving session grants (#51030) 2026-11-10 21:55:53 +00:00
test_resolvers_models.py
test_resolvers_seam.py
test_resolvers_store.py
test_route_checks.py feat(proxy): customer org, team and member hierarchy with budget templates (#51459) 2026-11-12 15:11:51 -08:00
test_router_override_fallback_auth.py
test_scalar_budget_windows.py feat(proxy): customer budget rollup, reset on the budget row's window, named templates, team overrides, multi-window limits and pause_allow_increase (#51582) 2026-11-13 16:05:35 +00:00
test_search_tool_deny_by_default.py
test_team_grants.py
test_team_member_budget.py
test_unmapped_model_budget_enforcement.py refactor(router): delete the python router core, the rust core is the only core (#50178) 2026-11-05 10:40:46 -08:00
test_user_api_key_auth.py fix(proxy): refuse a key pinned to another customer org before registering an unknown org alias (#51674) 2026-11-13 11:03:43 -08:00
test_user_api_key_auth_request_flow.py feat(proxy): run requests with unknown customer ids untracked instead of refusing them (#51548) 2026-11-13 16:56:21 +00:00
test_vector_store_access_groups.py feat(access-groups): grant vector stores through access groups (#50290) 2026-11-12 14:59:17 -08:00