5e10ea4136
* fix(mcp): respect X-Forwarded-Proto header in OAuth endpoints When LiteLLM proxy is deployed behind a reverse proxy (like nginx or a load balancer) that terminates SSL/TLS, the proxy receives HTTP requests internally but should expose HTTPS URLs externally. This change detects the X-Forwarded-Proto header and uses it to construct correct redirect URIs and endpoint URLs. Changes: - Added X-Forwarded-Proto detection to authorize, token, oauth_protected_resource_mcp, oauth_authorization_server_mcp, and register_client endpoints - Added comprehensive tests for X-Forwarded-Proto header support across all affected endpoints - Fixed existing tests to properly mock request.headers 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * fix formatting * feat(mcp): support X-Forwarded-Host for proxy base URL reconstruction Extended X-Forwarded-Proto support to also handle X-Forwarded-Host and X-Forwarded-Port headers. This allows LiteLLM to correctly construct redirect URIs and endpoint URLs when deployed behind a reverse proxy that changes the host/port. Example scenario: - Internal URL: http://localhost:8888/github/mcp - External URL: https://proxy.abc.com/github/mcp - Proxy sets: X-Forwarded-Proto: https, X-Forwarded-Host: proxy.abc.com Changes: - Added get_request_base_url() helper function to centralize X-Forwarded-* header handling - Replaced all inline X-Forwarded-Proto checks with calls to the helper function - Helper handles X-Forwarded-Proto, X-Forwarded-Host, and X-Forwarded-Port - Added tests for X-Forwarded-Host scenarios in authorize and token endpoints Fixes issue where protected resource URL mismatch occurred: Error: Protected resource http://proxy.abc.com:8888/github/mcp does not match expected https://proxy.abc.com/github/mcp 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * chore: replace Yelp-specific hostnames with generic examples Changed all references from chatproxy.yelpcorp.com to proxy.example.com in: - test_proxy_forwarding.py (default host parameter) - TEST_PROXY_FORWARDING.md (documentation examples) - discoverable_endpoints.py (docstring example) - test_discoverable_endpoints.py (test mock data) This makes the code more generic and suitable for open source. All 13 tests still passing. * remove accidentally added files * fix formatting * add new test for get_base_url --------- Co-authored-by: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| audio_tests | ||
| basic_proxy_startup_tests | ||
| batches_tests | ||
| code_coverage_tests | ||
| documentation_tests | ||
| enterprise | ||
| guardrails_tests | ||
| image_gen_tests | ||
| litellm/llms | ||
| litellm_utils_tests | ||
| litellm-proxy-extras | ||
| llm_responses_api_testing | ||
| llm_translation | ||
| load_tests | ||
| local_testing | ||
| logging_callback_tests | ||
| mcp_tests | ||
| multi_instance_e2e_tests | ||
| ocr_tests | ||
| old_proxy_tests/tests | ||
| openai_endpoints_tests | ||
| otel_tests | ||
| pass_through_tests | ||
| pass_through_unit_tests | ||
| proxy_admin_ui_tests | ||
| proxy_security_tests | ||
| proxy_unit_tests | ||
| router_unit_tests | ||
| scim_tests | ||
| search_tests | ||
| spend_tracking_tests | ||
| store_model_in_db_tests | ||
| test_litellm | ||
| unified_google_tests | ||
| vector_store_tests | ||
| windows_tests | ||
| __init__.py | ||
| gettysburg.wav | ||
| large_text.py | ||
| openai_batch_completions.jsonl | ||
| README.MD | ||
| test_budget_management.py | ||
| test_callbacks_on_proxy.py | ||
| test_config.py | ||
| test_debug_warning.py | ||
| test_end_users.py | ||
| test_entrypoint.py | ||
| test_fallbacks.py | ||
| test_health.py | ||
| test_keys.py | ||
| test_litellm_proxy_responses_config.py | ||
| test_logging.conf | ||
| test_models.py | ||
| test_openai_endpoints.py | ||
| test_organizations.py | ||
| test_passthrough_endpoints.py | ||
| test_ratelimit.py | ||
| test_resource_cleanup.py | ||
| test_spend_logs.py | ||
| test_team_logging.py | ||
| test_team_members.py | ||
| test_team.py | ||
| test_users.py | ||
In total litellm runs 1000+ tests
[02/20/2025] Update:
To make it easier to contribute and map what behavior is tested,
we've started mapping the litellm directory in tests/test_litellm
This folder can only run mock tests.