mubashir1osmani edd5727f3c fix(proxy): enforce key/team/org/project model grants on model-routed file and batch credentials ... Files and batches routes take their model from a header, query param or a model-encoded resource id, which the auth layer never sees, so any key could name any deployment and act on that provider account with its server-side key. Every caller-supplied model now goes through can_key_call_resolved_model before deployment credentials are resolved, covering file create/retrieve/content/ delete/list, batch create/retrieve/list/cancel, and vector store files.		2026-09-10 17:40:28 -04:00
..
__init__.py	test(batches): add 1:1 test file scaffold for batches component paths (#30529)	2026-06-29 09:22:58 +05:30
test_endpoints.py	fix(proxy): enforce key/team/org/project model grants on model-routed file and batch credentials	2026-09-10 17:40:28 -04:00