Cursor AgentandMateo Wang 8cf3bf11bd fix(scim): preserve scim_active on PUT when client omits the field ...

A SCIM PUT may legally omit `active` (full-replace with the field
absent). Pydantic fills the SCIMUser.active default of True, so the PUT
handler was overwriting metadata.scim_active with True even when the
client never sent it — silently reactivating a previously SCIM-blocked
user and unblocking their keys.

Use model_fields_set to detect whether the client actually sent
`active`. If omitted, preserve the prior scim_active value and skip
the cascade to virtual keys.

Also drop comments added in this PR that just narrate what the code
does; keep only the docstrings and the SQL-NULL pitfall note that
explain non-obvious behaviour.

Co-authored-by: Mateo Wang <mateo-berri@users.noreply.github.com>

2026-05-02 04:15:25 +00:00

..

_experimental/mcp_server

Merge pull request #27016 from stuxf/fix/mcp-openapi-tool-auth-bypass

2026-05-01 17:38:40 -07:00

agent_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

anthropic_endpoints

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

auth

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_fix_scim_virtual_key_deactivation

2026-05-01 20:29:19 -07:00

client

fix: scope CLI stored token to base_url to prevent cross-domain credential leakage (#26945)

2026-05-01 12:11:32 -07:00

common_utils

Merge pull request #26202 from BerriAI/litellm_token_verification_query_opt

2026-05-01 10:10:07 -07:00

db

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_dbReconnectNonBlocking_local

2026-04-29 13:57:35 -07:00

discovery_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

experimental/mcp_server

…

google_endpoints

run pre_call_hook on Google generateContent endpoints

2026-04-30 16:43:42 -07:00

guardrails

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_clean_litellm_oss_staging_04_01_2026

2026-05-01 15:54:10 -07:00

health_endpoints

fix(health): validate model_id against scoped model_list in cache-path resolver

2026-05-01 14:11:51 -07:00

hooks

fix(batches): count non-chat tokens, validate batch-file model access (VERIA-39) (#27015)

2026-05-01 17:36:12 -07:00

image_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

management_endpoints

fix(scim): preserve scim_active on PUT when client omits the field

2026-05-02 04:15:25 +00:00

management_helpers

feat(proxy): move search tool access to object permissions

2026-04-29 12:29:20 +05:30

memory

Litellm memory improvements v2 (#26541)

2026-04-25 19:03:43 -07:00

middleware

Merge branch 'litellm_internal_staging' into litellm_metrics_auth

2026-04-17 16:53:21 -07:00

openai_files_endpoint

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_yj_apr17

2026-04-17 17:36:40 -07:00

pass_through_endpoints

Merge pull request #26827 from stuxf/fix/passthrough-auth-default

2026-04-30 17:06:37 -07:00

policy_engine

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

prompts

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

public_endpoints

Merge remote-tracking branch 'origin/litellm_internal_staging' into litellm_/wonderful-bouman

2026-04-17 21:32:09 -07:00

rag_endpoints

tests and route permissions (#21508)

2026-02-18 16:58:38 -08:00

realtime_endpoints

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

response_api_endpoints

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

spend_tracking

chore(auth): substitute alias for master key on UserAPIKeyAuth

2026-04-29 18:53:12 +00:00

test_configs

…

ui_crud_endpoints

Merge pull request #26442 from BerriAI/litellm_feat-restrict-org-admin-permissions

2026-04-25 08:50:26 -07:00

vector_store_endpoints

test(vector stores): allow primitive rag depth boundary

2026-04-30 17:28:02 -07:00

__init__.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

conftest.py

test: isolate proxy master_key/prisma_client module globals between tests

2026-04-23 15:31:16 -07:00

test_aiohttp_cleanup_closed.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_aiohttp_session_recovery.py

fix: use AsyncMock for concurrent test consistency

2026-03-18 00:54:23 +00:00

test_api_key_masking_in_errors.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_audio_speech_prometheus_hooks.py

fix req changes

2026-02-28 21:32:57 +05:30

test_batch_expiry.py

fix(proxy): improve team expiry enforcement validation

2026-03-03 17:29:39 -08:00

test_batch_metadata_none_fix.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_batch_retrieve_bedrock.py

fix(proxy/batches): forward model to retrieve_batch for bedrock

2026-04-29 22:48:03 +02:00

test_budget_reservation.py

track reservation entry before counter write

2026-05-01 00:09:51 -07:00

test_caching_routes.py

…

test_chat_completion_metadata.py

…

test_common_request_processing.py

feat(proxy): LiteLLM headers on Google native generateContent routes (#25500)

2026-04-29 12:34:14 -07:00

test_cors_config.py

refactor: extract _get_cors_config() for testability, fix no-op CORS tests

2026-04-11 22:24:04 +05:30

test_custom_proxy.py

…

test_empty_model_list.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_enforce_user_param.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_fallback_management_endpoints.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_fastapi_offline_routes.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_filter_models_by_team_access_group.py

fix: resolve access group names in _filter_models_by_team_id (#25224)

2026-05-01 11:55:36 +05:30

test_health_check_functions.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_health_check_max_tokens.py

fix(proxy): avoid duplicate reasoning capability lookup

2026-04-17 12:49:31 +05:30

test_langfuse_passthrough_security.py

chore(callbacks): guard dynamic integration hosts

2026-04-30 14:27:19 -07:00

test_lazy_openapi_snapshot.py

[Fix] Tests: Move Misplaced Import in Lazy OpenAPI Snapshot Test

2026-05-01 14:24:53 -07:00

test_litellm_pre_call_utils.py

Fix policy registry teardown in tests

2026-05-01 17:25:38 -07:00

test_max_budget_env_var.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_dump_with_preserved_fields.py

Fix_mapped tests part 2

2026-02-26 12:43:39 +05:30

test_model_id_header_propagation.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_info_default_limits.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_level_guardrails.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_openapi_schema_validation.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_prometheus_cleanup.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_proxy_cli.py

feat(proxy): add --timeout_worker_healthcheck flag for uvicorn worker triage

2026-04-27 11:06:56 -07:00

test_proxy_server.py

Merge branch 'litellm_yj_may1' into codex/budget-race-enforcement

2026-05-01 14:32:18 -07:00

test_proxy_types.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_proxy_utils.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_pyroscope.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_redis_auth_cache_flag.py

refactor(proxy): replace DualCache with UserApiKeyCache for user API key management

2026-04-28 19:15:03 +00:00

test_response_model_sanitization.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_route_a2a_models.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_route_llm_request.py

fix(proxy): hardcode mock-testing strip list to avoid cyclic import

2026-05-01 08:06:10 +00:00

test_shared_health_check.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_spend_log_cleanup.py

fix: harden CORS, create_views exception handling, and spend log cleanup loop

2026-04-11 18:58:04 +05:30

test_swagger_chat_completions.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_team_member_update.py

…

test_team_org_move.py

fix(team_endpoints): auto-add SSO team members to org on move (proxy admin only) (#26377)

2026-04-24 08:36:25 -07:00

test_tools_allowlist_enforcement.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_update_llm_router_resilience.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_utils.py

add NO_OPENAPI env var to disable /openapi.json endpoint (#25547)

2026-04-14 23:37:49 +05:30