mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-10 03:28:53 +00:00
912206832c
The discovery document is accepted only when its issuer is the --base-url the user typed and every endpoint and the resource share that origin (RFC 8414 section 3.3), so a tampered or redirected document can no longer point the code, verifier, or refresh token at another host. After a failed refresh the re-read token record is used only when it continues the same credential (same proxy, token endpoint, and resource) and has not expired, so a concurrent login against a different proxy can never hand this one its key |
||
|---|---|---|
| .. | ||
| autoroute | ||
| __init__.py | ||
| test_agents.py | ||
| test_auth_commands.py | ||
| test_claude_settings.py | ||
| test_config_commands.py | ||
| test_credentials_commands.py | ||
| test_encryption_commands.py | ||
| test_global_options.py | ||
| test_keys_commands.py | ||
| test_model_groups_commands.py | ||
| test_models_commands.py | ||
| test_pkce_login.py | ||
| test_up_commands.py | ||
| test_users_commands.py | ||