mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-01 02:02:20 +00:00
bc3b5b1d5b
* fix(proxy): revoke UI session tokens on logout and password change Adds POST /session/logout to revoke the presented UI session key server side (previously logout was client-side only and the key stayed valid until expiry). Password changes now revoke the user's other UI sessions: self-change keeps the caller's session, admin reset and onboarding claim revoke all. The BYOK OAuth cookie auth now re-resolves the embedded key against the DB so revoked sessions get a 401. * fix(proxy): satisfy B008 budget and backend allowlist for /session/logout * refactor(proxy): satisfy type-discipline budget in session_endpoints |
||
|---|---|---|
| .. | ||
| forms | ||
| http | ||
| assetPaths.test.ts | ||
| assetPaths.ts | ||
| autorouter_presets.test.ts | ||
| autorouter_presets.ts | ||
| cva.config.test.ts | ||
| cva.config.ts | ||
| logoTreatments.test.ts | ||
| logoTreatments.ts | ||
| serverRootPath.ts | ||
| toast.test.ts | ||
| toast.ts | ||