chore(auth): require trusted proxy for header identity auth - #26825

Merged

yuneng-berri merged 6 commits into

BerriAI:litellm_internal_stagingfrom

stuxf:fix/oauth2-proxy-header-forgery

May 2, 2026

Commits on Apr 29, 2026

fix(auth): gate oauth2-proxy header trust on premium + privileged-field denylist

stuxf
and
claude
committed
3c9a869
chore(oauth2-proxy): /simplify pass — drop dead max_budget branch + DRY tests

stuxf
and
claude
committed
e6867c1
fix(oauth2-proxy): switch privileged-field denylist to identity-only allowlist

stuxf
and
claude
committed
b35287a
fix(oauth2-proxy): drop premium gate; identity-only allowlist is the security fix

stuxf
and
claude
committed
fbcfd59
chore(oauth2-proxy): drop unused patch import + tighten docstring

stuxf
and
claude
committed
722bc63

Commits on Apr 30, 2026

chore(auth): require trusted proxy for header identity auth
stuxf
committed
2f46417