mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-14 23:21:35 +00:00
5f7c0e1e49
Base landed the native CLI OAuth + PKCE login, which added its own token storage and a silent refresh that wrote the key straight to token.json. This branch had already moved that secret into the OS keychain, so the two had to be joined rather than picked between. auth.py now keeps one pair of record helpers, load_token and save_token, that read and write through the vault and hand the PKCE layer the plain mapping it works with. fresh_api_key and revoke_stored_credential get vault-bound save and reload callables, so a renewed key is stored in the keychain like any other and a sibling process's rotation is still seen. login goes through _replace_stored_token on both paths, so the credential it replaces is revoked on the proxy and the user is still told where the new one landed. logout revokes first, then reports what the clear actually managed to do. |
||
|---|---|---|
| .. | ||
| autoroute | ||
| __init__.py | ||
| test_agents.py | ||
| test_auth_commands.py | ||
| test_claude_settings.py | ||
| test_config_commands.py | ||
| test_credentials_commands.py | ||
| test_encryption_commands.py | ||
| test_global_options.py | ||
| test_keys_commands.py | ||
| test_model_groups_commands.py | ||
| test_models_commands.py | ||
| test_pkce_login.py | ||
| test_up_commands.py | ||
| test_users_commands.py | ||