tPj""UdZddlmZddlmZmZmZddlmZm Z m Z ddl Z ddl m Z ddlmZddlmZdd lmZdd lmZmZmZmZdd lmZdd lmZdd lmZdZee d<er ddl!m"Z#e#ezZ"neZ"de$e%e&fde%dzde$e%e&ffdZ'GddZ(y)z Handles Authentication Errors )Mapping) TYPE_CHECKINGAnyFinal) HTTPExceptionRequeststatusN)verbose_proxy_logger) EMPTY_MAPPING)seed_request_identity)is_expected_client_error)LitellmUserRolesProxyErrorTypesProxyExceptionUserAPIKeyAuth)_get_request_ip_address)PrismaDBExceptionHandler) ServiceTypes__db_unavailable_fallback__DB_UNAVAILABLE_FALLBACK_USER_ID)Span request_data requester_ipreturnc|s|Sd|vrdnd}|j|}t|tr|nt}|jdr|Si||i|d|iiS)zAuth gate rejections are raised before `add_litellm_data_to_request` records the caller IP, so their failure logs would otherwise carry no IP nor key/user identity.litellm_metadatametadatarequester_ip_address)get isinstancerr )rrkeyrbases n/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/auth/auth_exception_handler.py_with_requester_ip_addressr$'sp '9\'I#zC"&&s+H4>x4QWdD xx&' Pl PC!OD!O*@,!O PPcXeZdZe d dededeeefdede dzdede dzd e fd Z y) UserAPIKeyAuthExceptionHandlerNerequestrrouteparent_otel_spanapi_keyresolved_identityrc Kddlm}m}tjrytj |rd|j jtjd|dtjdtddttj|St!||j#d d u } t%|r t&j(stj*ntj,} | d || d | i||j/n t} || _|| _| j4xst|j4| _t7| |j#dt9|t&j:rE|j<s9ddlm } |j#d} | t9| tBr| nd\}|_|jEtG|| || tHjJ|d{}||}t9|t&j:r@tM|jNtHjPdtS|dtTjVt9|tXrPtMtS|dd|dtHjJtS|ddtS|dtTjZt9|tLr|tj\|r+tMdtHj^dtTj`tMdtC|ztHjJtS|ddtTjZ7Ww)a Handles Connection Errors when reading a Virtual Key from LiteLLM DB Use this if you don't want failed DB queries to block LLM API reqiests Reliability scenarios this covers: - DB is down and having an outage - Unable to read / recover a key from the DB Returns: - UserAPIKeyAuth: If general_settings.allow_requests_on_db_unavailable is True Raises: - Original Exception in all other cases r)general_settingsproxy_logging_objget_key_objectg)service call_typeerrordurationupAuth: DB unavailable — issuing restricted INTERNAL_USER fallback token (allow_requests_on_db_unavailable=True)zfailed-to-connect-to-db)key_nametokenuser_id user_role request_routeuse_x_forwarded_forT)r)r;z^litellm.proxy.proxy_server.user_api_key_auth(): Exception occured - %s Requester IP Address:%sr)extraN)r,model)r=)#resolve_llm_provider_for_rate_limit)roriginal_exceptionuser_api_key_dict error_typer* status_code)messagetypeparamcodedetailzAuthentication Error()rENonezbService Unavailable, the authentication database is temporarily unreachable. Please retry shortly.zAuthentication Error, )1litellm.proxy.proxy_serverr/r0r&should_allow_request_on_db_unavailableis_database_connection_errorservice_logging_objservice_failure_hookrDBr warningrrr INTERNAL_USERrrr litellmlog_client_error_tracebacksr4 exception model_copyr+r:r,r r BudgetExceededError llm_provider&litellm.proxy.hooks.rate_limiter_utilsr>strpost_call_failure_hookr$r auth_errorrrCbudget_exceededgetattrr HTTP_429_TOO_MANY_REQUESTSrHTTP_401_UNAUTHORIZED%is_database_service_unavailable_errorno_db_connectionHTTP_503_SERVICE_UNAVAILABLE)r(r)rr*r+r,r-r/r0rlog_fnr@r> budget_model_transformed_exceptions r#_handle_authentication_errorz;UserAPIKeyAuthExceptionHandler._handle_authentication_error5s0 % K K M(EEaH  1 1 F F$* G  ! ( (I "2/7*88#  #:$4$8$89N$OSW$W#L ,A.w7Z7Z%**)33  q%|4  CTB_ 1 < < >eseu 1A  ..3  +(9(A(A(l^\cEdElEl  % "!"&&w/ !W889!..'3&6&6w&? $G$.|S$ALt%!1> 2C1Y1Y7 lS#$"3*55 2Z2, !%0)!W889$II(88 M63T3TU  !]+$#Ax3H11MN(33!!Wf5 M63O3OP  A~.'MMaP$I)99 <<!03q69$//a&111  K,sGM?EM)N) __name__ __module__ __qualname__ staticmethod ExceptionrdictrYobjectrrrgr%r#r'r'4s48S SS3;'S S + S  S*D0S SSr%r'))__doc__collections.abcrtypingrrrfastapirrr rRlitellm._loggingr litellm.constantsr !litellm.integrations.otel.runtimer 'litellm.litellm_core_utils.core_helpersr litellm.proxy._typesrrrrlitellm.proxy.auth.auth_utilsr"litellm.proxy.db.exception_handlerrlitellm.types.servicesrr__annotations__opentelemetry.tracer_SpanrmrYrnr$r'ror%r#rs$,,221+CL BG/ *GF1 3;D D QT#v+-> QcTXj Q]abegmbm]n QUUr%