zoveki 87fec5467f fix(sso): keep CLI SSO and Claude Code gateway team lists in the user record's order (#49033) ... * fix(sso): bind CLI SSO and Claude Code gateway logins to the first team on the user record * fix(proxy): keep SCIM and JWT team sync in record order, and look up SSO groups once SCIM PATCH and JWT team sync saved a user's teams from a set, so the first team on the record, the one a Claude Code gateway sign-in binds, could change on any sync. Both now keep the record's order and append new teams in the order the IdP sent them. SSO group sync now drops claim groups that are not LiteLLM teams with one lookup before adding the missing teams one at a time, so a claim full of non-team groups no longer costs one failed add per group on every sign-in. * test(sso): expect the gateway team dropdown in the user record's order * fix(sso): read team existence from the writer, keep new-user and SCIM replace team order * fix(scim): keep the teams a user already has in record order on PATCH and PUT * fix(scim): keep record team order when a SCIM POST matches an existing email * fix(scim): join new teams in request order so a failed roster write keeps it * fix(scim): let a groups replace win over later group ops in a PATCH again Applying group adds and removes after a replace made a PATCH that deactivates a user and adds a team that does not exist answer 404 and leave the user active, where it answered 200 before. Keep the record's team order, but ignore group ops after the last replace as the base did. * test(sso): type the CLI team detail row helper --------- Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com> Co-authored-by: rj-cairn <349020452+rj-cairn@users.noreply.github.com>		2026-10-30 05:07:00 -07:00
..
__init__.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_admin_viewer_handler_access.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_checks.py	fix(proxy): let typesafe/* allowlists cover /typesafe Jev calls and list Jev in the model picker (#47697)	2026-10-28 20:19:58 -07:00
test_auth_checks_object_access_and_lookup.py	fix(proxy): enforce team and key Allowed Vector Stores when no vector store registry is loaded (#48915)	2026-10-28 23:25:14 -07:00
test_auth_exception_handler.py	fix(proxy)!: stop answering with the literal string "None" as error type and param on the proxy-server, auth, spend, and key health routes (#39540)	2026-10-29 18:20:52 -07:00
test_auth_hot_path_network_requests.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_object_prefetch.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_utils.py	feat(pass-through): add eu/jev decision API pass-through with spend tracking (#46875)	2026-10-29 17:52:43 -07:00
test_authorization.py	fix(proxy): share ownership permissions for spend logs and traces (#44239)	2026-10-03 01:38:54 +00:00
test_banned_params_extra_body.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_cli_auth.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_custom_auth_end_user_budget.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_default_end_user_budget_simple.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_fallback_budget.py	fix(router): report fallbacks skipped for access or budget instead of calling them failed (#46291)	2026-10-14 15:08:47 -07:00
test_fallback_model_access.py	fix(proxy): enforce fallback model access by default (#46127)	2026-10-13 07:58:53 -07:00
test_handle_jwt.py	fix(sso): keep CLI SSO and Claude Code gateway team lists in the user record's order (#49033)	2026-10-30 05:07:00 -07:00
test_info_routes.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_jwt.py	fix(proxy): refresh cached team on /team/block and /team/unblock (#35643)	2026-10-19 22:50:33 +00:00
test_litellm_license.py	fix(proxy): stop logging license values during verification (#44956)	2026-10-06 17:05:07 -07:00
test_login_utils.py	test: fix flaky spend-log cleanup budget, login lockout, and wedged Redis tests (#47108)	2026-10-29 03:46:32 -07:00
test_master_key_boot_check.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_mcp_ip_filtering.py	refactor(mcp): drop the experimental label from the MCP server and client paths (#48513)	2026-10-27 17:47:50 +00:00
test_model_access_group_budgets.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_checks.py	fix(proxy): list only routable models for a wildcard alias over a provider org (#49152)	2026-10-30 00:14:49 -07:00
test_model_checks_fallbacks.py	refactor(router): move router callers onto the entry points and invert the proxy imports (#48847)	2026-10-29 17:26:33 +00:00
test_models_fallback_endpoint.py	refactor(router): move router callers onto the entry points and invert the proxy imports (#48847)	2026-10-29 17:26:33 +00:00
test_multi_budget_windows.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_multipart_bypass_repro.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_network.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_oauth2_proxy_hook.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_object_permission_loading.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_onboarding.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_organization_budget_enforcement.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_hashing.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_policy.py	feat(proxy): add LITELLM_OFFLINE_MODE, one switch for the fetches LiteLLM makes on its own (#48096)	2026-10-23 16:54:19 -07:00
test_personal_key_team_model_access.py	feat(proxy): let personal keys inherit model access from the owner's current teams (#43692)	2026-10-13 00:17:35 +00:00
test_proxy_routes.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_rds_iam_token.py	fix(proxy): preserve AWS session tokens for RDS IAM auth (#46559)	2026-10-15 22:51:39 +00:00
test_resolvers_exceptions.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_resolvers_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_models.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_seam.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_store.py	fix(auth): return a generic 401 for an unknown key (#39787)	2026-10-15 01:05:25 -07:00
test_route_checks.py	feat(pass-through): add eu/jev decision API pass-through with spend tracking (#46875)	2026-10-29 17:52:43 -07:00
test_router_override_fallback_auth.py	refactor(proxy): expose public names for private proxy helpers (#45170)	2026-10-07 18:59:27 -07:00
test_search_tool_deny_by_default.py	fix(proxy): scope dashboard search grants to user (#48464)	2026-10-26 15:01:40 -07:00
test_team_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_team_member_budget.py	feat(teams): show caller member spend and budget on Your Teams (#45674)	2026-10-24 17:09:55 -07:00
test_unmapped_model_budget_enforcement.py	refactor(router): move router callers onto the entry points and invert the proxy imports (#48847)	2026-10-29 17:26:33 +00:00
test_user_api_key_auth.py	fix(proxy)!: stop answering with the literal string "None" as error type and param on the proxy-server, auth, spend, and key health routes (#39540)	2026-10-29 18:20:52 -07:00
test_user_api_key_auth_request_flow.py	fix(proxy)!: enforce an end user's per-model budget from their linked budget (#48815)	2026-10-28 21:24:11 -07:00