phoenix/litellm-mirror
0
0
Fork 1
mirror of https://github.com/BerriAI/litellm.git synced 2025-04-27 11:43:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(handle_jwt.py): add more logging for jwt header

Browse source
This commit is contained in:
Krrish Dholakia 2024-03-22 16:33:32 -07:00
parent 275e0b94c9
commit 6eb0183776
1 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
litellm/proxy/auth/handle_jwt.py
View file

@ -8,10 +8,10 @@ JWT token must have 'litellm_proxy_admin' in scope.
import httpx import httpx
import jwt import jwt
from jwt.algorithms import RSAAlgorithm
import json import json
import os import os
from litellm.caching import DualCache from litellm.caching import DualCache
from litellm._logging import verbose_proxy_logger
from litellm.proxy._types import LiteLLMProxyRoles, LiteLLM_UserTable from litellm.proxy._types import LiteLLMProxyRoles, LiteLLM_UserTable
from litellm.proxy.utils import PrismaClient from litellm.proxy.utils import PrismaClient
from typing import Optional from typing import Optional
@ -137,6 +137,8 @@ class JWTHandler:
return scopes return scopes
async def auth_jwt(self, token: str) -> dict: async def auth_jwt(self, token: str) -> dict:
from jwt.algorithms import RSAAlgorithm
keys_url = os.getenv("JWT_PUBLIC_KEY_URL") keys_url = os.getenv("JWT_PUBLIC_KEY_URL")
if keys_url is None: if keys_url is None:
@ -147,7 +149,13 @@ class JWTHandler:
keys = response.json()["keys"] keys = response.json()["keys"]
header = jwt.get_unverified_header(token) header = jwt.get_unverified_header(token)
kid = header["kid"]
verbose_proxy_logger.debug(f"header: {header}")
if "kid" in header:
kid = header["kid"]
else:
raise Exception(f"Expected 'kid' in header. header={header}.")
for key in keys: for key in keys:
if key["kid"] == kid: if key["kid"] == kid: