yuneng-jiangandClaude Opus 4.6 bc752fb109 [Fix] Prevent internal users from creating invalid keys via key/generate and key/update ...

Internal users could exploit key/generate and key/update to create unbound
keys (no user_id, no budget) or attach keys to non-existent teams. This
adds validation for non-admin callers: auto-assign user_id on generate,
reject invalid team_ids, and prevent removing user_id on update.

Closes LIT-1884

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-16 17:27:12 -07:00

..

_experimental/mcp_server

fix(ci): skip tests requiring openai>=2.x and MCP M2M oauth2_flow

2026-03-13 01:09:56 +00:00

agent_endpoints

fix(tests): restore litellm_params=None on mock agent in a2a invoke test (#23125)

2026-03-09 07:16:02 -07:00

anthropic_endpoints

…

auth

Support multiple headers mapped to the customer user role (#23664)

2026-03-15 14:20:45 +05:30

client

…

common_utils

Merge pull request #20688 from BerriAI/litellm_budget_tier_enforcement_for_keys

2026-03-06 20:44:58 -08:00

db

Revert "feat(proxy): add Prisma DB pool and engine health metrics to Promethe…"

2026-03-09 14:55:11 -07:00

discovery_endpoints

Support auto_redirect_ui_login_to_sso in config.yaml general_settings

2026-03-11 11:34:17 -07:00

experimental/mcp_server

…

google_endpoints

fix: Metadata / Trace ID Missing in S3 Streaming Callbacks

2026-02-25 14:16:42 +05:30

guardrails

merge: resolve conflicts between main and litellm_oss_staging_03_11_2026

2026-03-12 09:38:31 -03:00

health_endpoints

Prisma DB Failure Detection and Self-Healing (#21059)

2026-03-05 13:44:49 -08:00

hooks

Merge branch 'main' into litellm_langfuse-session-trace-fix

2026-03-15 01:09:49 +05:30

image_endpoints

…

management_endpoints

[Fix] Prevent internal users from creating invalid keys via key/generate and key/update

2026-03-16 17:27:12 -07:00

management_helpers

[Feature] UI - Default Team Settings: Modernize page and fix defaults application

2026-03-14 00:01:25 -07:00

middleware

feat: add in_flight_requests metric to /health/backlog + prometheus (#22319)

2026-02-27 18:00:50 -08:00

openai_files_endpoint

CircleCI test stability (#23055)

2026-03-07 15:19:39 -08:00

pass_through_endpoints

fix: stabilize 5 CI test failures

2026-03-13 01:03:35 +00:00

policy_engine

Guardrail Policy Versioning (#21862)

2026-02-21 20:14:31 -08:00

prompts

…

public_endpoints

[Feature] Add /public/endpoints endpoint for provider endpoint support

2026-02-26 18:17:37 -08:00

rag_endpoints

tests and route permissions (#21508)

2026-02-18 16:58:38 -08:00

realtime_endpoints

fix(tests): fix flaky realtime WebRTC endpoint tests

2026-03-12 23:14:51 -07:00

response_api_endpoints

…

spend_tracking

merge: resolve conflicts with upstream staging (bedrock + mcp tests)

2026-03-12 13:40:16 -03:00

test_configs

…

ui_crud_endpoints

[Feature] UI - Default Team Settings: Modernize page and fix defaults application

2026-03-14 00:01:25 -07:00

vector_store_endpoints

…

__init__.py

…

conftest.py

…

test_aiohttp_cleanup_closed.py

fix(aiohttp): only set enable_cleanup_closed when required (#21897)

2026-02-23 21:06:29 -08:00

test_api_key_masking_in_errors.py

…

test_audio_speech_prometheus_hooks.py

fix req changes

2026-02-28 21:32:57 +05:30

test_batch_expiry.py

fix(proxy): improve team expiry enforcement validation

2026-03-03 17:29:39 -08:00

test_batch_metadata_none_fix.py

…

test_caching_routes.py

…

test_chat_completion_metadata.py

…

test_common_request_processing.py

[Fix] Malformed messages returning 500 instead of 400

2026-03-12 23:01:25 -07:00

test_custom_proxy.py

…

test_empty_model_list.py

[Release Fix] (#22411)

2026-02-28 09:46:35 -08:00

test_enforce_user_param.py

…

test_fallback_management_endpoints.py

…

test_fastapi_offline_routes.py

…

test_health_check_functions.py

Fix_mapped tests part 2

2026-02-26 12:43:39 +05:30

test_health_check_max_tokens.py

add docs and formatting

2026-02-28 14:08:09 +05:30

test_litellm_pre_call_utils.py

Bug Fix: auto-inject prompt caching support for Gemini models (#21881)

2026-03-03 20:25:35 -08:00

test_model_dump_with_preserved_fields.py

Fix_mapped tests part 2

2026-02-26 12:43:39 +05:30

test_model_id_header_propagation.py

…

test_openapi_schema_validation.py

Reapply "feat: add model_cost aliases expansion support"

2026-03-12 13:36:57 -03:00

test_prometheus_cleanup.py

[Infra] Merging RC Branch with Main (#23786)

2026-03-16 15:32:20 -07:00

test_proxy_cli.py

[Infra] Merging RC Branch with Main (#23786)

2026-03-16 15:32:20 -07:00

test_proxy_server.py

Fix inflight mypy

2026-03-02 19:41:32 +05:30

test_proxy_types.py

fix: Add PROXY_ADMIN role to system user for key rotation (#21896)

2026-02-27 19:11:29 -08:00

test_proxy_utils.py

[Feat[ extends OAuth2 M2M authentication support to info routes (/key/info, /team/info, /user/info, /model/info) (#22713)

2026-03-06 17:29:25 -08:00

test_pyroscope.py

…

test_response_model_sanitization.py

feat(azure_ai): show actual model used in Azure Model Router response

2026-03-12 11:41:19 +05:30

test_route_a2a_models.py

…

test_route_llm_request.py

…

test_shared_health_check.py

Fix_mapped tests part 2

2026-02-26 12:43:39 +05:30

test_spend_log_cleanup.py

Fix spend log cleanup: lock tracking, integer retention, skip log level

2026-03-03 10:12:08 -08:00

test_swagger_chat_completions.py

[Release Fix] (#22411)

2026-02-28 09:46:35 -08:00

test_team_member_update.py

…

test_tools_allowlist_enforcement.py

Bug Fix: auto-inject prompt caching support for Gemini models (#21881)

2026-03-03 20:25:35 -08:00

test_update_llm_router_resilience.py

fix(proxy): isolate get_config failures from model loading in sync loop

2026-02-26 17:49:44 -03:00