litellm/tests/integration/authorization
yucheng 3f90e54894 fix(proxy): replace Fernet plugin session claims with AES-256-GCM
Fernet (AES-128-CBC + HMAC-SHA256) is not an approved construction for the
FIPS 140-3 image. Plugin session claims now use AES-256-GCM through a
key-taking pair (encrypt_aes_gcm_with_key / decrypt_aes_gcm_with_key) that
the existing _encrypt_aes_gcm / _decrypt_aes_gcm wrappers delegate to, keyed
by the unchanged HMAC-SHA256(LITELLM_SALT_KEY, plugin_name) per-plugin key.
Claims live 30 seconds so no Fernet read-compatibility window is kept.

Resolves LIT-8428

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-09-24 08:00:36 +00:00
..
_guardrail_opt_out.py fix(proxy): gate disable_global_guardrails on keys and teams to proxy admins (#42699) 2026-09-23 18:03:02 -07:00
test_access_group_model_listing.py test(integration): regression tests for July cost tracking, budgeting and spend bugs (#42694) 2026-09-23 09:51:56 -07:00
test_bedrock_passthrough_model_access.py test(integration): regression tests for July cost tracking, budgeting and spend bugs (#42694) 2026-09-23 09:51:56 -07:00
test_jwt_default_team_provisioning.py test(integration): regression tests for July cost tracking, budgeting and spend bugs (#42694) 2026-09-23 09:51:56 -07:00
test_jwt_mapped_key_email_backfill.py test(integration): regression tests for July cost tracking, budgeting and spend bugs (#42694) 2026-09-23 09:51:56 -07:00
test_key_guardrail_opt_out.py fix(proxy): gate disable_global_guardrails on keys and teams to proxy admins (#42699) 2026-09-23 18:03:02 -07:00
test_key_guardrail_opt_out_chaos.py fix(proxy): gate disable_global_guardrails on keys and teams to proxy admins (#42699) 2026-09-23 18:03:02 -07:00
test_key_guardrail_opt_out_runtime.py fix(proxy): gate disable_global_guardrails on keys and teams to proxy admins (#42699) 2026-09-23 18:03:02 -07:00
test_object_permission_lookup.py test(integration): regression tests for July cost tracking, budgeting and spend bugs (#42694) 2026-09-23 09:51:56 -07:00
test_plugin_session_claim.py fix(proxy): replace Fernet plugin session claims with AES-256-GCM 2026-09-24 08:00:36 +00:00
test_warmed_policy.py Merge branches 'main' and 'litellm_fix_integration_conftest_import' of github.com:BerriAI/litellm into litellm_fix_integration_conftest_import 2026-09-17 10:33:31 -07:00