Skip to content

docs(token_auth): document team_claim_fallback opt-in flag#237

Open
milan-berri wants to merge 1 commit into
BerriAI:mainfrom
milan-berri:litellm_jwt_team_claim_fallback
Open

docs(token_auth): document team_claim_fallback opt-in flag#237
milan-berri wants to merge 1 commit into
BerriAI:mainfrom
milan-berri:litellm_jwt_team_claim_fallback

Conversation

@milan-berri
Copy link
Copy Markdown
Contributor

Summary

Documents the new team_claim_fallback opt-in flag on LiteLLM_JWTAuth (added in BerriAI/litellm#28913).

Adds a new "Fall back to DB team when JWT claims don't resolve" subsection under "Control model access with Teams" in docs/proxy/token_auth.md. Covers:

  • Default-off behavior (strict claim-based authorization preserved)
  • Opt-in behavior for deployments where IdP team claims live in a separate namespace from LiteLLM team_ids (e.g. machine tokens with advisory groups claims)
  • Behavior matrix across all team-resolution paths
  • Security envelope (single-team DB requirement + non-404 error propagation)

Related code PR

BerriAI/litellm#28913 — adds the team_claim_fallback flag and its enforcement.

Test plan

  • Markdown renders correctly (verified locally)
  • Table syntax is GitHub-flavored markdown compatible

Made with Cursor

Adds a new "Fall back to DB team when JWT claims don't resolve"
subsection under "Control model access with Teams". Documents the
default-off Veria-safe behavior and the opt-in fallback for
deployments where IdP team claims live in a separate namespace
from LiteLLM team_ids (e.g. machine tokens).

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented May 27, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
litellm Ready Ready Preview, Comment May 27, 2026 10:57am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant