mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-12 03:48:56 +00:00
1dbde0845e
* test: move guardrails, image, audio, batches, search legacy tests to unit * test: restore the custom guardrail and remaining chunk 1 unit rows * test: move the ocr matrix to e2e * test: drop comments from moved tests and fix vertex ocr credentials * test: move litellm utils and unified google legacy tests to their tiers * test: move logging callback and pass-through unit legacy tests to their tiers Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test: move store_model_in_db legacy tests and start the admin ui migration Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * test: finish the proxy job rows and drop their CircleCI jobs Moves the remaining multi-instance, openai endpoint, otel, pass-through and top-level proxy tests into tests/integration with scripted upstreams, rewrites the weak replacements to assert the outbound wire and exact responses, and removes the build_and_test job group this PR owns from CircleCI * test: tighten the key generation and error log assertions, rename migrated unit files to their mapped names * test: shard the pagerduty unit tests and record the rust harness file on the coverage allowlist * test: drive the SSO sign-in tests through a scripted IdP and isolate the cost center stand-in * test: type the e2e beta header, prompt cache and secret manager values * test: assert the missing model error message on the OpenAI routes * test: drop the deleted otel base class import and restore mcp redaction and exact langfuse usage checks * test: make the langfuse fixture directory a package for the layout check * test: restore collected no-match cases, real langfuse and gcs payload checks, and gate the aws secret lane * test: keep the ocr e2e pdf fixture next to the test * test: put meta below covers on the streaming tool search e2e * test: run the OCR matrix against a scripted upstream and fix two runner-only e2e failures * test: count only OCR calls in the OCR matrix recorder * test: pin OCR parse bodies and billed cost, group new e2e cases into classes * ci: restore the python image anchor dropped in the main sync --------- Co-authored-by: yuneng <yuneng@berri.ai> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
30 lines
1.2 KiB
Python
30 lines
1.2 KiB
Python
import uuid
|
|
from typing import Final
|
|
|
|
import httpx
|
|
|
|
from tests.integration._support.client import Gateway, list_value, object_value
|
|
|
|
|
|
def test_a_non_admin_key_cannot_generate_keys_even_after_an_admin_ui_login(gateway: Gateway) -> None:
|
|
user_id: Final = f"integration-key-owner-{uuid.uuid4().hex}"
|
|
with gateway.scenario() as scenario, httpx.Client(
|
|
base_url=str(gateway.client.base_url), timeout=15, trust_env=False
|
|
) as browser:
|
|
user_key: Final = scenario.key(user_id=user_id)
|
|
login: Final = browser.post("/login", data={"username": "admin", "password": gateway.key})
|
|
assert login.status_code in (200, 303), login.text
|
|
assert browser.cookies.get("token") is not None
|
|
|
|
denied: Final = browser.post(
|
|
"/key/generate",
|
|
json={"user_id": user_id},
|
|
headers={"Authorization": f"Bearer {user_key}"},
|
|
)
|
|
owned_keys: Final = list_value(gateway.get("/key/list", {"user_id": user_id})["keys"])
|
|
|
|
assert denied.status_code == 401, denied.text
|
|
error: Final = object_value(denied.json()["error"])
|
|
assert error["type"] == "auth_error"
|
|
assert "Only proxy admin can be used to generate" in str(error["message"])
|
|
assert len(owned_keys) == 1
|