litellm-mirror/litellm/proxy/auth
Ishaan Jaff f2a9d67e05 (UI) - Security Improvement, move to JWT Auth for Admin UI Sessions (#8995)
* (UI) - Improvements to session handling logic  (#8970)

* add cookieUtils

* use utils for clearing cookies

* on logout use clearTokenCookies

* ui use correct clearTokenCookies

* navbar show userEmail on UserID page

* add timestamp on token cookie

* update generate_authenticated_redirect_response

* use common getAuthToken

* fix clearTokenCookies

* fixes for get auth token

* fix invitation link sign in logic

* Revert "fix invitation link sign in logic"

This reverts commit 30e5308cb3.

* fix getAuthToken

* update setAuthToken

* fix ui session handling

* fix ui session handler

* bug fix stop generating LiteLLM Virtual keys for access

* working JWT insert into cookies

* use central place to build UI JWT token

* add _validate_ui_token

* fix ui session handler

* fix fetchWithCredentials

* check allowed routes for ui session tokens

* expose validate_session endpoint

* validate session endpoint

* call sso/session/validate

* getUISessionDetails

* ui move to getUISessionDetails

* /sso/session/validate

* fix cookie utils

* use getUISessionDetails

* use ui_session_id

* "/spend/logs/ui" in spend_tracking_routes

* working sign in JWT flow for proxy admin

* allow proxy admin to access ui routes

* use check_route_access

* update types

* update login method

* fixes to ui session handler

* working flow for admin and internal users

* fixes for invite links

* use JWTs for SSO sign in

* fix /invitation/new flow

* fix code quality checks

* fix _get_ui_session_token_from_cookies

* /organization/list

* ui sso sign in

* TestUISessionHandler

* TestUISessionHandler
2025-03-04 21:48:23 -08:00
..
auth_checks.py (UI) - Security Improvement, move to JWT Auth for Admin UI Sessions (#8995) 2025-03-04 21:48:23 -08:00
auth_checks_organization.py (feat proxy) [beta] add support for organization role based access controls (#6112) 2024-10-09 15:18:18 +05:30
auth_utils.py Improve rpm check on keys (#8301) 2025-02-05 20:23:08 -08:00
handle_jwt.py (UI) - Security Improvement, move to JWT Auth for Admin UI Sessions (#8995) 2025-03-04 21:48:23 -08:00
litellm_license.py (code quality) run ruff rule to ban unused imports (#7313) 2024-12-19 12:33:42 -08:00
model_checks.py patch - auth checks for model access (#8924) 2025-03-01 10:11:44 -08:00
oauth2_check.py (code quality) run ruff rule to ban unused imports (#7313) 2024-12-19 12:33:42 -08:00
oauth2_proxy_hook.py add hook for oauth2 proxy 2024-08-28 15:51:20 -07:00
public_key.pem fix update public key 2024-07-27 09:45:58 -07:00
rds_iam_token.py (code quality) run ruff rule to ban unused imports (#7313) 2024-12-19 12:33:42 -08:00
route_checks.py (UI) - Security Improvement, move to JWT Auth for Admin UI Sessions (#8995) 2025-03-04 21:48:23 -08:00
service_account_checks.py [Feat-Proxy] add service accounts backend (#5852) 2024-09-23 16:37:02 -07:00
user_api_key_auth.py (UI) - Security Improvement, move to JWT Auth for Admin UI Sessions (#8995) 2025-03-04 21:48:23 -08:00