Riddhi04 534ab1628d fix(proxy): enforce model access checks on Bedrock passthrough routes ... get_model_from_request could not resolve a model for /bedrock/... routes since it only checked the JSON body's model field and a small set of URL regexes, none matching Bedrock's passthrough path. This let common_checks skip the key/project model allowlist entirely for any Bedrock passthrough action (invoke, converse, and their streaming variants), while the same model was correctly blocked on /v1/chat/completions Extract the model from the Bedrock endpoint path using the same helper the passthrough handler itself relies on, so the existing allowlist check applies uniformly across auth methods and call paths		2026-09-03 15:02:49 -07:00
..
test_admin_viewer_handler_access.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_checks.py	fix(logging): redact credential query params from the uvicorn access log (#39293)	2026-09-02 15:10:36 -07:00
test_auth_exception_handler.py	fix(proxy): word database 503s by whether the fault is transient (#39256)	2026-09-02 15:05:55 -07:00
test_auth_hot_path_network_requests.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_utils.py	fix(proxy): enforce model access checks on Bedrock passthrough routes	2026-09-03 15:02:49 -07:00
test_banned_params_extra_body.py	fix(proxy): ban caller-supplied aws identity selectors in request bodies	2026-08-10 22:05:49 -07:00
test_cli_auth.py	test: assert the poll call shape after the timeout refactor	2026-08-25 11:00:29 -07:00
test_custom_auth_end_user_budget.py	fix(proxy): registry caches stop per-request tag and end-user Postgres reads in auth (#36801)	2026-08-17 18:52:13 +00:00
test_fallback_model_access.py	feat(proxy): gate fallback model access enforcement behind enforce_fallback_model_access	2026-08-27 15:45:10 -07:00
test_handle_jwt.py	test: require a match= on broad pytest.raises, and drop duplicate parametrize cases (#37769)	2026-08-20 20:24:49 -07:00
test_info_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_litellm_license.py	feat(router): limit heuristic_v2 auto-routers to one without the auto_router license feature (#39468)	2026-09-03 13:39:58 -07:00
test_login_utils.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_mcp_ip_filtering.py	fix(proxy): mark session/SSO/SAML cookies Secure behind a TLS-terminating reverse proxy (#39391)	2026-09-02 16:42:29 -07:00
test_model_access_group_budgets.py	fix(budgets): make the model access group ceiling exclusive	2026-08-29 15:20:10 -07:00
test_model_checks.py	test: enforce F811 so a duplicate definition cannot silently replace the first	2026-08-21 12:06:19 -07:00
test_model_checks_fallbacks.py	perf: build log messages lazily so filtered-out log records cost nothing (#35703)	2026-08-04 04:34:52 +00:00
test_multi_budget_windows.py	fix(proxy): enforce budgets against authoritative DB spend when the cross-pod counter is unreliable (#30684)	2026-06-18 10:35:41 -07:00
test_network.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_oauth2_proxy_hook.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_object_permission_loading.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_onboarding.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_organization_budget_enforcement.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_password_hashing.py	chore: fixes	2026-03-30 18:36:58 -07:00
test_password_policy.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_resolvers_exceptions.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_models.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_seam.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_store.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_route_checks.py	fix(proxy): let llm_api virtual keys read /model_group/info	2026-08-28 14:42:22 +00:00
test_router_override_fallback_auth.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_team_member_budget.py	Fix team member budget enforcement without user row (#27273)	2026-05-06 11:42:29 -07:00
test_unmapped_model_budget_enforcement.py	fix(router): never price a strategy-router alias (#36691)	2026-08-12 14:26:30 -07:00
test_user_api_key_auth.py	fix(auth): skip guaranteed-miss team lookup for the litellm-dashboard sentinel (#38471)	2026-08-27 12:48:11 -07:00