yassin f60a603519 fix(proxy): log configured model access denials at the final response boundary ... Post-auth denials from can_key_call_resolved_model (per-request alias rewrite, MCP sampling, realtime) never reach the auth exception handler, so the internal allowlist reason was dropped when model_access_denied_message was set. Log it once from the ProxyException response handler and the realtime rejection path instead, and convert JWT ModelAccessDeniedHTTPException into the specialized ProxyException so the same boundary covers it Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-09-16 00:12:49 +00:00
..
test_admin_viewer_handler_access.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_checks.py	fix(proxy): log configured model access denial only at the auth error boundary	2026-09-15 23:36:12 +00:00
test_auth_exception_handler.py	fix(proxy): log configured model access denials at the final response boundary	2026-09-16 00:12:49 +00:00
test_auth_hot_path_network_requests.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_auth_object_prefetch.py	fix(auth): keep prefetched org entries on the 5s getter TTL	2026-09-14 18:13:49 +00:00
test_auth_utils.py	feat(proxy): predict prompt-cache costs across deployments	2026-09-12 14:02:45 -07:00
test_banned_params_extra_body.py	fix(proxy): ban caller-supplied aws identity selectors in request bodies	2026-08-10 22:05:49 -07:00
test_cli_auth.py	test: assert the poll call shape after the timeout refactor	2026-08-25 11:00:29 -07:00
test_custom_auth_end_user_budget.py	feat(proxy): add tpd_limit (tokens per day) for batch submissions	2026-09-13 10:06:07 +00:00
test_fallback_model_access.py	feat(proxy): gate fallback model access enforcement behind enforce_fallback_model_access	2026-08-27 15:45:10 -07:00
test_handle_jwt.py	fix(proxy): log configured model access denial only at the auth error boundary	2026-09-15 23:36:12 +00:00
test_info_routes.py	style: run black formatter on files from main merge	2026-04-17 13:02:59 -07:00
test_litellm_license.py	feat(router): meter auto-router tier and prompt customization against the auto_router license feature (#39674)	2026-09-05 09:51:23 -07:00
test_login_utils.py	fix(auth): drop env-credential hint from 401 when env login is disabled	2026-09-08 13:05:38 +02:00
test_mcp_ip_filtering.py	fix(proxy): mark session/SSO/SAML cookies Secure behind a TLS-terminating reverse proxy (#39391)	2026-09-02 16:42:29 -07:00
test_model_access_group_budgets.py	fix(auth): put TQ008 suppressions on the patch call lines	2026-09-14 18:13:49 +00:00
test_model_checks.py	refactor(azure_ai): type the Foundry param mapping override and drop test docstrings	2026-09-05 19:21:34 -07:00
test_model_checks_fallbacks.py	perf: build log messages lazily so filtered-out log records cost nothing (#35703)	2026-08-04 04:34:52 +00:00
test_multi_budget_windows.py	fix(proxy): enforce budgets against authoritative DB spend when the cross-pod counter is unreliable (#30684)	2026-06-18 10:35:41 -07:00
test_network.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_oauth2_proxy_hook.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_object_permission_loading.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_onboarding.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_organization_budget_enforcement.py	test: drop the cwd-relative sys.path.insert calls from the test suite (#37802)	2026-08-22 09:25:58 -07:00
test_password_hashing.py	chore: fixes	2026-03-30 18:36:58 -07:00
test_password_policy.py	feat(auth): enforce configurable password policy and SSO-only login (#39381)	2026-09-02 14:28:13 -07:00
test_resolvers_exceptions.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_grants.py	fix(auth): refresh lite login session token grants from the live user and team rows	2026-09-10 18:33:49 -07:00
test_resolvers_models.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_seam.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_resolvers_store.py	feat(auth): resolve caller identity once into a Principal at the auth seam (#30887)	2026-06-20 18:49:41 -07:00
test_route_checks.py	fix(cli): show routed models and session stats for LLM API keys	2026-09-14 13:36:00 -07:00
test_router_override_fallback_auth.py	chore(proxy): clean up request parameter validation and provider destination handling (#34189)	2026-07-22 00:57:58 +00:00
test_team_grants.py	feat(proxy): add tpd_limit (tokens per day) for batch submissions	2026-09-13 10:06:07 +00:00
test_team_member_budget.py	Fix team member budget enforcement without user row (#27273)	2026-05-06 11:42:29 -07:00
test_unmapped_model_budget_enforcement.py	fix(router): never price a strategy-router alias (#36691)	2026-08-12 14:26:30 -07:00
test_user_api_key_auth.py	fix(jwt-auth): scope JWT key mappings by issuer to prevent cross-issuer collisions	2026-09-15 21:02:17 +00:00