devin-ai-integration[bot] 225fd3bcdf feat(proxy): add denied_passthrough_routes deny list for custom pass-through endpoints (#44924) ... * feat(proxy): add denied_passthrough_routes deny list for custom pass-through endpoints Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(proxy): harden denied_passthrough_routes against non-admin clears and dot-segment paths Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * chore(ui): regenerate schema.d.ts for typed denied_passthrough_routes Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(proxy): match trailing-slash deny entries, block null metadata from dropping denies Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(proxy): close bulk update, encoded ?/# and ordering gaps in passthrough deny list Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(proxy): check denied pass-through routes against the path the forwarder sends upstream Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix(proxy): type matching_denied_passthrough_route metadata mappings * fix(proxy): treat a `/` deny entry as denying every pass-through route Also types the new deny-list tests and drops their get_server_root_path mock in favour of unsetting SERVER_ROOT_PATH. * test(proxy): type the deny-list tests and drop unrelated test reformatting --------- Co-authored-by: mrinal <mrinal@berri.ai> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: Yucheng He <yucheng@berri.ai>		2026-10-07 16:19:53 -07:00
..
__init__.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_admin_viewer_handler_access.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_checks.py	fix(router): price a model group from the deployments that serve it (#44732)	2026-10-06 05:31:09 +00:00
test_auth_checks_object_access_and_lookup.py	feat(proxy): add opt-in vector_store_deny_by_default for least-privilege vector store access (#44244)	2026-10-06 12:50:25 -07:00
test_auth_exception_handler.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_hot_path_network_requests.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_object_prefetch.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_auth_utils.py	test: move the unit half of 126 mixed legacy files into tests/unit (#45090)	2026-10-07 14:07:43 -07:00
test_authorization.py	fix(proxy): share ownership permissions for spend logs and traces (#44239)	2026-10-03 01:38:54 +00:00
test_banned_params_extra_body.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_cli_auth.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_custom_auth_end_user_budget.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_default_end_user_budget_simple.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_fallback_budget.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_fallback_model_access.py	feat(auth): deny search tools by default when search_tool_deny_by_default is set (#44490)	2026-10-06 12:50:26 -07:00
test_handle_jwt.py	feat(proxy): add denied_passthrough_routes deny list for custom pass-through endpoints (#44924)	2026-10-07 16:19:53 -07:00
test_info_routes.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_jwt.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_litellm_license.py	fix(proxy): stop logging license values during verification (#44956)	2026-10-06 17:05:07 -07:00
test_login_utils.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_master_key_boot_check.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_mcp_ip_filtering.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_access_group_budgets.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_checks.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_model_checks_fallbacks.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_models_fallback_endpoint.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_multi_budget_windows.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_multipart_bypass_repro.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_network.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_oauth2_proxy_hook.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_object_permission_loading.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_onboarding.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_organization_budget_enforcement.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_hashing.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_password_policy.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_proxy_routes.py	ci: move tests/proxy_unit_tests to tests/unit/proxy and run the proxy-db shards from litellm-tests (#42903)	2026-09-24 22:59:11 +00:00
test_resolvers_exceptions.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_models.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_seam.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_resolvers_store.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_route_checks.py	feat(proxy): add denied_passthrough_routes deny list for custom pass-through endpoints (#44924)	2026-10-07 16:19:53 -07:00
test_router_override_fallback_auth.py	feat(proxy): limit which models an end user can call (#43904)	2026-10-05 21:58:03 +00:00
test_search_tool_deny_by_default.py	feat(auth): deny search tools by default when search_tool_deny_by_default is set (#44490)	2026-10-06 12:50:26 -07:00
test_team_grants.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_team_member_budget.py	test(proxy): move auth, hooks, policy_engine and client tests into tests/unit/proxy (#43998)	2026-10-01 10:11:45 -07:00
test_unmapped_model_budget_enforcement.py	fix(proxy): judge the free-model budget waiver by the group an alias routes to (#44638)	2026-10-06 02:44:35 +00:00
test_user_api_key_auth.py	fix(security): remove the publicly known master key from the repo (#44718)	2026-10-06 10:55:24 -07:00
test_user_api_key_auth_request_flow.py	feat(proxy): add opt-in vector_store_deny_by_default for least-privilege vector store access (#44244)	2026-10-06 12:50:25 -07:00