mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-17 23:51:30 +00:00
41f9d8de7b
Two NVIDIA-Riva-specific fields consumed by the audio-transcription handler via the provider's `optional_params` passthrough were not covered by the proxy's existing banned-request-body list or the admin-config clearing list applied on `api_base` BYOK override: * `nvcf_function_id` * `use_ssl` Add both to `_BANNED_REQUEST_BODY_PARAMS` in `litellm/proxy/auth/auth_utils.py` and to the kwargs-only list in `_admin_config_fields_to_clear_on_base_override()` in `litellm/router_utils/clientside_credential_handler.py`, next to the analogous provider-specific entries already there (`aws_bedrock_*`, OCI provider fields, etc.). Same admin opt-ins as every other entry on those lists (`general_settings.allow_client_side_credentials` proxy-wide, or `configurable_clientside_auth_params` per deployment). Regression tests in `tests/test_litellm/proxy/auth/test_auth_utils.py` cover root-level rejection, the historical `api_key` bypass, both admin opt-in paths (proxy-wide and per-deployment), nested-container smuggling via the existing recursive walk, and clearing on `api_base` override. Mutation check verified. Resolves VERIA-493 |
||
|---|---|---|
| .. | ||
| resolvers | ||
| auth_checks.py | ||
| auth_checks_organization.py | ||
| auth_exception_handler.py | ||
| auth_method.py | ||
| auth_utils.py | ||
| handle_jwt.py | ||
| ip_address_utils.py | ||
| litellm_license.py | ||
| login_utils.py | ||
| model_checks.py | ||
| network.py | ||
| oauth2_check.py | ||
| oauth2_proxy_hook.py | ||
| public_key.pem | ||
| rds_iam_token.py | ||
| roles.py | ||
| route_checks.py | ||
| trusted_proxy_utils.py | ||
| user_api_key_auth.py | ||