litellm/tests/test_litellm/proxy/_experimental
mateo-berri 1b0b75ccd7
fix(jwt/mcp): warn on unscoped JWT fallback; route agent permission lookup through shared helper
- _build_decode_kwargs no longer suppresses the unscoped-fallback warning
  when LiteLLM_JWTAuth.issuers is set: tokens whose iss does not match
  any configured issuer still fall through to the global path, and that
  fallback is itself unscoped when JWT_AUDIENCE/JWT_ISSUER are absent.

- _get_agent_object_permission now caches the agent_id ->
  object_permission_id mapping and delegates the permission lookup to
  the shared get_object_permission helper, so the agent path reuses the
  same cache entries as the org / team / key paths.
2026-05-21 19:15:02 +00:00
..
mcp_server fix(jwt/mcp): warn on unscoped JWT fallback; route agent permission lookup through shared helper 2026-05-21 19:15:02 +00:00