phoenix/litellm
1
0
Fork 0
forked from phoenix/litellm-mirror
Code Pull requests Activity

feat - create keys with permissions

Browse source
This commit is contained in:
Ishaan Jaff 2024-05-21 18:04:17 -07:00
parent 1d35b7543a
commit 64130e368c
2 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
litellm/proxy/_types.py
View file

@ -157,6 +157,7 @@ class LiteLLMRoutes(enum.Enum):
"/global/spend/end_users", "/global/spend/end_users",
"/global/spend/models", "/global/spend/models",
"/global/predict/spend/logs", "/global/predict/spend/logs",
"/global/spend/report",
] ]
public_routes: List = [ public_routes: List = [

17
litellm/proxy/proxy_server.py
View file

@ -1211,6 +1211,13 @@ async def user_api_key_auth(
_has_user_setup_sso() _has_user_setup_sso()
and route in LiteLLMRoutes.sso_only_routes.value and route in LiteLLMRoutes.sso_only_routes.value
): ):
pass
elif (
route in LiteLLMRoutes.global_spend_tracking_routes.value
and getattr(valid_token, "permissions", None) is not None
and "get_spend_routes" in getattr(valid_token, "permissions", None)
):
pass pass
else: else:
user_role = "unknown" user_role = "unknown"
@ -2967,7 +2974,7 @@ async def generate_key_helper_fn(
organization_id: Optional[str] = None, organization_id: Optional[str] = None,
table_name: Optional[Literal["key", "user"]] = None, table_name: Optional[Literal["key", "user"]] = None,
): ):
global prisma_client, custom_db_client, user_api_key_cache, litellm_proxy_admin_name global prisma_client, custom_db_client, user_api_key_cache, litellm_proxy_admin_name, premium_user
if prisma_client is None and custom_db_client is None: if prisma_client is None and custom_db_client is None:
raise Exception( raise Exception(
@ -3062,6 +3069,14 @@ async def generate_key_helper_fn(
if isinstance(saved_token["metadata"], str): if isinstance(saved_token["metadata"], str):
saved_token["metadata"] = json.loads(saved_token["metadata"]) saved_token["metadata"] = json.loads(saved_token["metadata"])
if isinstance(saved_token["permissions"], str): if isinstance(saved_token["permissions"], str):
if (
"get_spend_routes" in saved_token["permissions"]
and premium_user != True
):
raise Exception(
"get_spend_routes permission is only available for LiteLLM Enterprise users"
)
saved_token["permissions"] = json.loads(saved_token["permissions"]) saved_token["permissions"] = json.loads(saved_token["permissions"])
if isinstance(saved_token["model_max_budget"], str): if isinstance(saved_token["model_max_budget"], str):
saved_token["model_max_budget"] = json.loads( saved_token["model_max_budget"] = json.loads(