mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-06 02:48:13 +00:00
0d5e14fcd1
Introduces auth_v2 as a clean-slate, flag-gated auth path (general_settings auth_version: v2). When on, the existing auth is bypassed entirely and requests flow through a new authenticator chain plus a casbin authorization engine. Slice 1 scope: - Entry point fork in user_api_key_auth; v1 untouched when the flag is off - Authenticator chain with a virtual-key node resolving identity via the existing key store (reuses get_key_object; no parallel identity storage) - casbin engine: RBAC policy rows for the control plane, role bridged from the key's existing user_role; per-resource-id objects supported - Governs the model-deployment management plane only (/model/new, /model/update, /model/delete, /model/info); every other route is loud-open and logs a warning so unprotected surfaces are never silent - Policies/groupings stored in LiteLLM_CasbinRule, loaded on cold routes with a short snapshot cache; a bootstrap policy keeps proxy_admin fully authorized - Decision core (enforcer, route map, principal, authorizer, policy store) holds no framework imports, so it is unit-testable in isolation Tests cover the allow/deny matrix, deny-override, domain scoping, per-id granularity, loud-open behavior, and policy loading. Data plane (inference-time model access) and additional resources/mechanisms are deferred to later slices. casbin governs everything eventually via ABAC matchers over cached attributes; this slice lays the control-plane foundation. |
||
|---|---|---|
| .. | ||
| migrations | ||
| __init__.py | ||
| _logging.py | ||
| schema.prisma | ||
| utils.py | ||