feat(proxy): add AES-256-GCM at-rest credential encryption with versioned format and re-encryption migration - #31215

Merged

michelligabriele merged 6 commits into

litellm_internal_stagingfrom

litellm_aes256_credential_encryption

Jun 29, 2026

Commits on Jun 24, 2026

feat(proxy): add AES-256-GCM at-rest credential encryption with versioned format and re-encryption migration
michelligabriele
committed
28cef79
test(proxy): add behavior scenarios for credential migration endpoints
michelligabriele
committed
7cf768d
fix(proxy): scan covered tables in encryption check, fix CI lint and route types
michelligabriele
committed
3698098
fix(proxy): migrate callback_settings credentials, clear CI lint/recursion gates, add encryption endpoint+CLI tests
michelligabriele
committed
3bd0211
fix(proxy): correct dry-run/real-run migrated vs residual-legacy counters in config and SSO walkers
michelligabriele
committed
743cf74
fix(proxy): make callback-vars residual detection gate-independent in encryption check
michelligabriele
committed
8af3536