Repository navigation
docs(proxy): document pass-through auth modes and drop the Enterprise label - #1739
Open
mateo-berri wants to merge 1 commit into
Open
mateo-berri wants to merge 1 commit into
mateo-berri wants to merge 1 commit into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
Author
|
bugbot run |
There was a problem hiding this comment.
✅ Bugbot reviewed your changes and found no new issues!
Comment @cursor review or bugbot run to trigger another review on this PR
Reviewed by Cursor Bugbot for commit 3a80295. Configure here.
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
TLDR
Documents what
authon a config pass-through entry means after BerriAI/litellm#43250 and drops the Enterprise label from itauth: truerestricts the entry to keys and teams granted it throughallowed_passthrough_routesauth: falseserves it to anyone with no keyauthout lets any valid LiteLLM key through, with the same policy checks as a chat requestauthout and the planned default flipDepends on
BerriAI/litellm#43250, merge this after that PR lands
Note
Low Risk
Documentation-only change with no runtime or configuration behavior changes in this PR.
Overview
Updates the pass-through configuration reference so
authis documented as access control (not an Enterprise-only toggle): the inline comment now points readers to a new Authentication section instead of labeling it Enterprise.That section explains the three modes—
auth: true(keys/teams withallowed_passthrough_routesonly, full proxy policy checks),auth: false(unauthenticated public access), and omittedauth(any valid LiteLLM key with chat-equivalent checks)—plus the startup warning and planned default flip toauth: true. It adds YAML and/key/generate//team/newexamples for granting routes (including*prefixes), the403when a key lacks access, and howallowed_routes: ["llm_api_routes"]interacts with omitted-authroutes.Reviewed by Cursor Bugbot for commit 3a80295. Bugbot is set up for automated code reviews on this repo. Configure here.