From f1699d4cbfabaa92d4828208ea1b348968eaac26 Mon Sep 17 00:00:00 2001
From: Ishaan Jaff <ishaanjaffer0324@gmail.com>
Date: Mon, 8 Sep 2025 17:33:36 -0700
Subject: [PATCH] fix IGNORE_FUNCTIONS

---
 litellm/llms/vertex_ai/vertex_llm_base.py     | 68 +++++++++++++++++--
 .../code_coverage_tests/recursive_detector.py |  1 +
 2 files changed, 63 insertions(+), 6 deletions(-)

diff --git a/litellm/llms/vertex_ai/vertex_llm_base.py b/litellm/llms/vertex_ai/vertex_llm_base.py
index c24f26fffa..76998e7669 100644
--- a/litellm/llms/vertex_ai/vertex_llm_base.py
+++ b/litellm/llms/vertex_ai/vertex_llm_base.py
@@ -375,10 +375,60 @@ class VertexBase:
             url=url,
         )
 
+    def _handle_reauthentication(
+        self,
+        credentials: Optional[VERTEX_CREDENTIALS_TYPES],
+        project_id: Optional[str],
+        credential_cache_key: Tuple,
+        error: Exception,
+    ) -> Tuple[str, str]:
+        """
+        Handle reauthentication when credentials refresh fails.
+        
+        This method clears the cached credentials and attempts to reload them once.
+        It should only be called when "Reauthentication is needed" error occurs.
+        
+        Args:
+            credentials: The original credentials
+            project_id: The project ID
+            credential_cache_key: The cache key to clear
+            error: The original error that triggered reauthentication
+            
+        Returns:
+            Tuple of (access_token, project_id)
+            
+        Raises:
+            The original error if reauthentication fails
+        """
+        verbose_logger.debug(
+            f"Handling reauthentication for project_id: {project_id}. "
+            f"Clearing cache and retrying once."
+        )
+        
+        # Clear the cached credentials
+        if credential_cache_key in self._credentials_project_mapping:
+            del self._credentials_project_mapping[credential_cache_key]
+        
+        # Retry once with _retry_reauth=True to prevent infinite recursion
+        try:
+            return self.get_access_token(
+                credentials=credentials,
+                project_id=project_id,
+                _retry_reauth=True,
+            )
+        except Exception as retry_error:
+            verbose_logger.error(
+                f"Reauthentication retry failed for project_id: {project_id}. "
+                f"Original error: {str(error)}. Retry error: {str(retry_error)}"
+            )
+            # Re-raise the original error for better context
+            raise error
+
     def get_access_token(
         self,
         credentials: Optional[VERTEX_CREDENTIALS_TYPES],
         project_id: Optional[str],
+        _retry_reauth: bool = False,
     ) -> Tuple[str, str]:
         """
         Get access token and project id
@@ -388,6 +438,14 @@ class VertexBase:
         3. Check if loaded credentials have expired
         4. If expired, refresh credentials
         5. Return access token and project id
+        
+        Args:
+            credentials: The credentials to use for authentication
+            project_id: The Google Cloud project ID
+            _retry_reauth: Internal flag to prevent infinite recursion during reauthentication
+        
+        Returns:
+            Tuple of (access_token, project_id)
         """
 
         # Convert dict credentials to string for caching
@@ -481,14 +539,12 @@ class VertexBase:
             except Exception as e:
                 # if refresh fails, it's possible the user has re-authenticated via `gcloud auth application-default login`
                 # in this case, we should try to reload the credentials by clearing the cache and retrying
-                if "Reauthentication is needed" in str(e):
-                    verbose_logger.debug(
-                        f"Credential refresh failed for project_id: {project_id}. Deleting from cache and retrying."
-                    )
-                    del self._credentials_project_mapping[credential_cache_key]
-                    return self.get_access_token(
+                if "Reauthentication is needed" in str(e) and not _retry_reauth:
+                    return self._handle_reauthentication(
                         credentials=credentials,
                         project_id=project_id,
+                        credential_cache_key=credential_cache_key,
+                        error=e,
                     )
                 raise e
 
diff --git a/tests/code_coverage_tests/recursive_detector.py b/tests/code_coverage_tests/recursive_detector.py
index ee948f1317..a7d1f0f045 100644
--- a/tests/code_coverage_tests/recursive_detector.py
+++ b/tests/code_coverage_tests/recursive_detector.py
@@ -28,6 +28,7 @@ IGNORE_FUNCTIONS = [
     "_remove_json_schema_refs",  # max depth set.,
     "_convert_schema_types",  # max depth set.,
     "_fix_enum_empty_strings",  # max depth set.,
+    "get_access_token",  # max depth set.,
 ]