Sameer Kankute eef1ec3e8d fix(proxy): enforce tag budgets for key-level tags (#29108) ...

* fix(proxy): enforce tag budgets for key-level tags

Merge API key metadata.tags into request_data before _tag_max_budget_check
so per-tag budgets apply when tags are set on the key at creation time.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix(auth): avoid false reject for key-inherited tags

Run reject_clientside_metadata_tags before key-tag injection, then inject key metadata tags immediately before tag budget checks so key tags still enforce budgets without being treated as client-supplied tags.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-28 11:39:02 -07:00

..

test_admin_viewer_handler_access.py

fix(rbac): restore admin-viewer read parity for Logs page + settings reads

2026-04-29 19:21:41 -07:00

test_auth_checks.py

fix(proxy): enforce tag budgets for key-level tags (#29108)

2026-05-28 11:39:02 -07:00

test_auth_exception_handler.py

Fix proxy auth status code tests (#27555)

2026-05-09 14:47:48 -07:00

test_auth_hot_path_network_requests.py

fix: update docker test file to right path

2026-02-19 18:44:28 +05:30

test_auth_utils.py

Litellm oss staging 250526 (#28770)

2026-05-26 11:57:39 -07:00

test_banned_params_extra_body.py

chore(tests): drop redundant membership check; trim test comment

2026-05-14 03:39:15 +00:00

test_cli_auth.py

cover cli sso start validation

2026-04-29 17:25:32 -07:00

test_custom_auth_end_user_budget.py

fix(auth): centralize common_checks to close authorization bypass

2026-04-23 00:04:42 +00:00

test_handle_jwt.py

fix(auth): harden JWT routing wildcard iss and merge list team_id claims

2026-05-11 11:35:56 +05:30

test_info_routes.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_litellm_license.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_login_utils.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_mcp_ip_filtering.py

Return Clear error message why no tools are available / IP Filtering occured

2026-02-26 09:56:44 +05:30

test_model_checks_fallbacks.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_model_checks.py

fix(proxy): hydrate wildcard discovery credentials (#28284) (#28419)

2026-05-20 20:03:05 -07:00

test_multi_budget_windows.py

feat: multiple concurrent budget windows per API key and team (#24883) (#25109)

2026-04-06 14:02:04 -07:00

test_oauth2_proxy_hook.py

chore(auth): require trusted proxy for header identity auth

2026-04-29 21:20:21 -07:00

test_object_permission_loading.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_onboarding.py

chore(auth): address onboarding review follow-ups

2026-04-29 19:10:30 -07:00

test_organization_budget_enforcement.py

style: run black formatter on files from main merge

2026-04-17 13:02:59 -07:00

test_password_hashing.py

chore: fixes

2026-03-30 18:36:58 -07:00

test_route_checks.py

feat(proxy): allow llm_api_routes virtual keys to list MCP servers (#28442)

2026-05-25 16:34:18 -07:00

test_router_override_fallback_auth.py

[Fix] Proxy: Repair Merge Fallout In Router-Override Fallback Auth

2026-05-01 17:48:51 -07:00

test_team_member_budget.py

Fix team member budget enforcement without user row (#27273)

2026-05-06 11:42:29 -07:00

test_unmapped_model_budget_enforcement.py

perf: eliminate per-request callback scanning on proxy hot path (#27858)

2026-05-14 09:28:31 -07:00

test_user_api_key_auth.py

fix: end user logs (#27758) (#28290)

2026-05-20 23:37:19 -07:00