phoenix/litellm
1
0
Fork 0
forked from phoenix/litellm-mirror
Code Pull requests Activity

(fix) only allow master_key to access UI

Browse source
This commit is contained in:
ishaan-jaff 2024-02-01 16:12:53 -08:00
parent 83cbed8b20
commit a45ce8c5f5
1 changed files with 17 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

22
litellm/proxy/proxy_server.py
View file

@ -3051,14 +3051,26 @@ async def login(request: Request):
import multipart import multipart
except ImportError: except ImportError:
subprocess.run(["pip", "install", "python-multipart"]) subprocess.run(["pip", "install", "python-multipart"])
global master_key
form = await request.form() form = await request.form()
username = str(form.get("username")) username = str(form.get("username"))
password = form.get("password") password = str(form.get("password"))
ui_username = os.getenv("UI_USERNAME", "litellm") ui_username = os.getenv("UI_USERNAME", "admin")
ui_password = os.getenv("UI_PASSWORD", "llm") ui_password = os.getenv("UI_PASSWORD", "")
if ui_password is None:
ui_password = str(master_key) if master_key is not None else None
if username == ui_username and password == ui_password: if ui_password is None:
raise ProxyException(
message="set Proxy master key to use UI. https://docs.litellm.ai/docs/proxy/virtual_keys",
type="auth_error",
param="UI_PASSWORD",
code=status.HTTP_500_INTERNAL_SERVER_ERROR,
)
if secrets.compare_digest(username, ui_username) and secrets.compare_digest(
password, ui_password
):
user_id = username user_id = username
# User is Authe'd in - generate key for the UI to access Proxy # User is Authe'd in - generate key for the UI to access Proxy
response = await generate_key_helper_fn( response = await generate_key_helper_fn(