mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-17 23:51:30 +00:00
e02f19fdd9
Every Admin UI session key is stamped with team_id=litellm-dashboard, a reserved sentinel that /team/new refuses to create, so resolving it against the database can only fail. The absent-versus-unreadable distinction #36837 added read that as a deleted team and 404'd every dashboard request. Resolve the sentinel from the token instead of asking for a row that will never exist. The reserved id alone does not earn the exemption. The synthesized team's empty models reads as every model, so an identity that merely names the sentinel is widened rather than waved through, and several auth paths take team_id straight from data the proxy did not mint: JWT claims, an OAuth2 introspection response, a custom auth handler's return value. Rather than enumerate the producers to exclude, require proof of where the credential came from. A database-minted session key is already marked as a virtual key. The EXPERIMENTAL_UI_LOGIN blob has no key row, and a proxy-admin one returns before the virtual-key paths, so mark it where it is decrypted with the proxy's own ui_hash_key. Both markers are stripped from validated input, so no claim, header or handler return can carry one in. That leaves the id itself, which /team/new reserves but key creation did not, so a proxy admin could put an ordinary key on the sentinel team and it would inherit the exemption along with the skip of its owner's user-level model check. Reserve the id on the key create and update paths too. The UI mints its session key through generate_key_helper_fn directly, so it never passes through either one. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| test_admin_viewer_handler_access.py | ||
| test_auth_checks.py | ||
| test_auth_exception_handler.py | ||
| test_auth_hot_path_network_requests.py | ||
| test_auth_utils.py | ||
| test_banned_params_extra_body.py | ||
| test_cli_auth.py | ||
| test_custom_auth_end_user_budget.py | ||
| test_handle_jwt.py | ||
| test_info_routes.py | ||
| test_litellm_license.py | ||
| test_login_utils.py | ||
| test_mcp_ip_filtering.py | ||
| test_model_checks.py | ||
| test_model_checks_fallbacks.py | ||
| test_multi_budget_windows.py | ||
| test_network.py | ||
| test_oauth2_proxy_hook.py | ||
| test_object_permission_loading.py | ||
| test_onboarding.py | ||
| test_organization_budget_enforcement.py | ||
| test_password_hashing.py | ||
| test_resolvers_exceptions.py | ||
| test_resolvers_models.py | ||
| test_resolvers_seam.py | ||
| test_resolvers_store.py | ||
| test_route_checks.py | ||
| test_router_override_fallback_auth.py | ||
| test_team_member_budget.py | ||
| test_unmapped_model_budget_enforcement.py | ||
| test_user_api_key_auth.py | ||