Yuneng Jiang 7d6ee2a9ca feat(proxy): let AI API keys read /model/info ... Keys created with key_type=llm_api get allowed_routes=["llm_api_routes"], which covered /v1/models but not /v1/model/info, so a client could list model names but not read pricing, mode, or max_tokens without a second key. Adds both /model/info and /v1/model/info (same handler) to llm_api_routes only. Membership there is not the same as RouteChecks.is_llm_api_route(), which is what gates DISABLE_LLM_API_ENDPOINTS, global/virtual-key budget enforcement, enforce_user_param and JWT team attachment; /guardrails/apply_guardrail already sits in the group the same way. /v2/model/info stays out: it is the paginated Admin UI listing, not model metadata a caller needs at request time. public_routes moves from set([...]) to a frozenset literal to keep the LIT002 and ruff-strict ceilings from rising; both budgets ratchet down by one.		2026-08-01 11:43:36 -07:00
..
test_admin_viewer_handler_access.py	feat(proxy): add GET /management/v1/budgets (#35310)	2026-07-31 11:47:05 -07:00
test_auth_checks.py	fix(proxy): only enforce budgets on routes that can spend (#35274)	2026-07-30 16:06:45 -07:00
test_auth_exception_handler.py	fix(proxy): return 5xx on DB infra errors during auth; reserve 401 for genuine auth failures (#29986)	2026-06-10 23:48:11 +00:00
test_auth_hot_path_network_requests.py	perf(auth): negative-cache missing user/key lookups on the request hot path (#32368)	2026-07-08 09:59:57 +03:00
test_auth_utils.py	test(auth): cover managed batch/file team access denial end to end	2026-07-28 15:39:50 +00:00
test_banned_params_extra_body.py	chore(tests): drop redundant membership check; trim test comment	2026-05-14 03:39:15 +00:00
test_cli_auth.py	fix(cli): surface actionable CLI SSO errors when CLI and proxy versions skew (#33309)	2026-07-15 10:17:40 -07:00
test_custom_auth_end_user_budget.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_handle_jwt.py	fix(jwt_auth): grant only /v1/messages routes to JWT teams by default, not all anthropic_routes	2026-07-27 17:15:09 -07:00
test_info_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_litellm_license.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_login_utils.py	feat(mcp): gateway DCR session admission at the aggregate /mcp endpoint (LIT-3637)	2026-07-23 00:24:28 -07:00
test_mcp_ip_filtering.py	feat(mcp): add mcp_xff_num_trusted_hops to harden X-Forwarded-For client IP resolution (#31257)	2026-06-25 07:31:29 -07:00
test_model_checks.py	revert: undo teamless all-team-models denial from #32022 and #29746 (#32032)	2026-07-03 18:56:07 -07:00
test_model_checks_fallbacks.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_multi_budget_windows.py	fix(proxy): enforce budgets against authoritative DB spend when the cross-pod counter is unreliable (#30684)	2026-06-18 10:35:41 -07:00
test_network.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_oauth2_proxy_hook.py	chore(auth): require trusted proxy for header identity auth	2026-04-29 21:20:21 -07:00
test_object_permission_loading.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_onboarding.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_organization_budget_enforcement.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_password_hashing.py	chore: fixes	2026-03-30 18:36:58 -07:00
test_resolvers_exceptions.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_models.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_seam.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_store.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_route_checks.py	feat(proxy): let AI API keys read /model/info	2026-08-01 11:43:36 -07:00
test_router_override_fallback_auth.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_team_member_budget.py	Fix team member budget enforcement without user row (#27273)	2026-05-06 11:42:29 -07:00
test_unmapped_model_budget_enforcement.py	perf: eliminate per-request callback scanning on proxy hot path (#27858)	2026-05-14 09:28:31 -07:00
test_user_api_key_auth.py	Merge pull request #34266 from BerriAI/litellm_team-model-allowlist-stale-qqg50q	2026-07-29 11:00:38 -07:00