litellm/tests/test_litellm/secret_managers
yucheng-berri f982b67d78
fix(proxy): harden secret name validation for external secret manager integrations (LIT-4201) (#32092)
key_alias can become the secret name used by external secret manager
integrations (HashiCorp Vault, CyberArk Conjur) when store_virtual_keys is
enabled. Add raise_if_unsafe_secret_name, a shared validation check applied
unconditionally before a secret name reaches either integration or the
/key/generate, /key/update, and /key/regenerate API boundary, independent
of the existing enable_key_alias_format_validation opt-in flag.

Also hardens the Vault URL builder to percent-encode reserved characters
in secret_name (preserving "/" and "@"), and switches the Conjur policy
body to a real YAML serializer instead of raw string interpolation.
2026-07-08 10:36:00 -07:00
..
test_aws_secret_manager_replication.py chore: litellm oss staging160626 (#30527) 2026-06-16 18:23:13 -07:00
test_aws_secret_manager_rotation.py style: run black formatter on files from main merge 2026-04-17 13:02:59 -07:00
test_aws_secret_manager_v2.py fix(tests): isolate flaky files endpoint tests from global proxy state (#21788) 2026-02-21 11:20:32 -08:00
test_base_secret_manager.py fix(proxy): harden secret name validation for external secret manager integrations (LIT-4201) (#32092) 2026-07-08 10:36:00 -07:00
test_custom_secret_manager.py style: run black formatter on files from main merge 2026-04-17 13:02:59 -07:00
test_get_azure_ad_token_provider.py test(test_get_azure_ad_token_provider.py): add unit test to ensure default azure credentials used in the right context 2025-09-11 16:07:32 -07:00
test_secret_managers_main.py Implement normalize_nonempty_secret_str function to trim whitespace from secrets and treat empty values as unset. Update proxy_server to use this function for Grafana credentials. Enhance tests to validate the new normalization behavior. 2026-05-04 18:17:31 +00:00