litellm

mirror of https://github.com/BerriAI/litellm.git synced 2026-11-13 08:52:02 +00:00

History

Krrish Dholakia 70f399b8c5 feat(auth): grant access groups through principal attribute rules (#50455 ) * feat(auth): grant access groups through principal attribute rules Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(auth): satisfy cache tracing and recursion CI checks Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(auth): close access group rule authorization bypasses Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(auth): reject self-editable identity rule attributes Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Centralize JWT model authorization Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Cover centralized key checks and name denied JWT models Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Test centralized authorization for custom auth and JWT mappings Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Preserve model normalization before budget validation Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Use a controlled clock for WebSocket session deadline tests Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Unify JWT credential admission and simplify team selection Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Simplify request-time access group authorization Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * Use real requests in custom auth budget fixtures Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> --------- Co-authored-by: Krrish Dholakia <krrishdholakia@berri.ai> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-11-09 13:59:40 -08:00
..
__init__.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903 )	2026-09-24 22:59:11 +00:00
test_access_group_rules.py	feat(auth): grant access groups through principal attribute rules (#50455 )	2026-11-09 13:59:40 -08:00
test_admin_viewer_handler_access.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_auth_checks.py	feat(redis): serve the proxy's common Redis call with Rust stores (#50170 )	2026-11-06 06:01:11 +00:00
test_auth_checks_object_access_and_lookup.py	feat(proxy): mixed Codex model picker and LiteLLM routing on native codex routes (#49408 )	2026-11-06 11:14:47 -08:00
test_auth_exception_handler.py	fix(proxy)!: stop answering with the literal string "None" as error type and param on the proxy-server, auth, spend, and key health routes (#39540 )	2026-10-29 18:20:52 -07:00
test_auth_hot_path_network_requests.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_auth_object_prefetch.py	feat(redis): serve the proxy's common Redis call with Rust stores (#50170 )	2026-11-06 06:01:11 +00:00
test_auth_utils.py	feat(proxy)!: only let clients pick S3 buckets the admin allowed (#47496 )	2026-11-06 02:50:15 +00:00
test_authorization.py	fix(proxy): share ownership permissions for spend logs and traces (#44239 )	2026-10-03 01:38:54 +00:00
test_banned_params_extra_body.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_cli_auth.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_custom_auth_end_user_budget.py	feat(auth): grant access groups through principal attribute rules (#50455 )	2026-11-09 13:59:40 -08:00
test_default_end_user_budget_simple.py	refactor(proxy): expose public names for private proxy helpers (#45170 )	2026-10-07 18:59:27 -07:00
test_fallback_budget.py	refactor(router): route the router family through RoutingContext and close the outside surface (#49118 )	2026-10-30 19:18:54 -07:00
test_fallback_model_access.py	refactor(router): delete the python router core, the rust core is the only core (#50178 )	2026-11-05 10:40:46 -08:00
test_handle_jwt.py	feat(auth): grant access groups through principal attribute rules (#50455 )	2026-11-09 13:59:40 -08:00
test_info_routes.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_jwt.py	fix(proxy): refresh cached team on /team/block and /team/unblock (#35643 )	2026-10-19 22:50:33 +00:00
test_litellm_license.py	fix(proxy): stop logging license values during verification (#44956 )	2026-10-06 17:05:07 -07:00
test_login_utils.py	feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874 )	2026-11-06 01:31:59 -08:00
test_master_key_boot_check.py	fix(security): remove the publicly known master key from the repo (#44718 )	2026-10-06 10:55:24 -07:00
test_mcp_ip_filtering.py	refactor(mcp): drop the experimental label from the MCP server and client paths (#48513 )	2026-10-27 17:47:50 +00:00
test_model_access_group_budgets.py	feat(redis): serve the proxy's common Redis call with Rust stores (#50170 )	2026-11-06 06:01:11 +00:00
test_model_checks.py	feat(proxy): mixed Codex model picker and LiteLLM routing on native codex routes (#49408 )	2026-11-06 11:14:47 -08:00
test_model_checks_fallbacks.py	refactor(router): route the router family through RoutingContext and close the outside surface (#49118 )	2026-10-30 19:18:54 -07:00
test_models_fallback_endpoint.py	refactor(router): move router callers onto the entry points and invert the proxy imports (#48847 )	2026-10-29 17:26:33 +00:00
test_multi_budget_windows.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_multipart_bypass_repro.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903 )	2026-09-24 22:59:11 +00:00
test_network.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_oauth2_proxy_hook.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_object_permission_loading.py	refactor(proxy): expose public names for private proxy helpers (#45170 )	2026-10-07 18:59:27 -07:00
test_onboarding.py	feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874 )	2026-11-06 01:31:59 -08:00
test_organization_budget_enforcement.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_password_hashing.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_password_policy.py	feat(proxy): hash UI passwords with PBKDF2 in FIPS mode (#49874 )	2026-11-06 01:31:59 -08:00
test_personal_key_team_model_access.py	feat(proxy): let personal keys inherit model access from the owner's current teams (#43692 )	2026-10-13 00:17:35 +00:00
test_proxy_routes.py	refactor(proxy): expose public names for private proxy helpers (#45170 )	2026-10-07 18:59:27 -07:00
test_rds_iam_token.py	fix(proxy): preserve AWS session tokens for RDS IAM auth (#46559 )	2026-10-15 22:51:39 +00:00
test_resolvers_exceptions.py	fix(auth): return a generic 401 for an unknown key (#39787 )	2026-10-15 01:05:25 -07:00
test_resolvers_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_resolvers_models.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_resolvers_seam.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_resolvers_store.py	fix(auth): return a generic 401 for an unknown key (#39787 )	2026-10-15 01:05:25 -07:00
test_route_checks.py	feat(skills): show download counts and downloader history (#50165 )	2026-11-05 05:25:08 -08:00
test_router_override_fallback_auth.py	refactor(proxy): expose public names for private proxy helpers (#45170 )	2026-10-07 18:59:27 -07:00
test_search_tool_deny_by_default.py	fix(proxy): scope dashboard search grants to user (#48464 )	2026-10-26 15:01:40 -07:00
test_team_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998 )	2026-10-01 10:11:45 -07:00
test_team_member_budget.py	feat(teams): show caller member spend and budget on Your Teams (#45674 )	2026-10-24 17:09:55 -07:00
test_unmapped_model_budget_enforcement.py	refactor(router): delete the python router core, the rust core is the only core (#50178 )	2026-11-05 10:40:46 -08:00
test_user_api_key_auth.py	feat(auth): grant access groups through principal attribute rules (#50455 )	2026-11-09 13:59:40 -08:00
test_user_api_key_auth_request_flow.py	feat(auth): grant access groups through principal attribute rules (#50455 )	2026-11-09 13:59:40 -08:00