The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
litellm	Ready	Preview, Comment	Feb 26, 2026 8:44pm

All committers have signed the CLA.

Greptile Overview

Greptile Summary

Adds deep-linking to the key creation modal via URL query parameters (e.g., ?create=true&team_id=abc&models=gpt-4) and preserves these deep-links through SSO authentication flows using cookie-based return URL storage. Also refactors formatUserRole into a shared utility.

• URL parameter parsing with input validation and sanitization (length limits, allowlists for enum fields, team membership checks)
• Cookie-based return URL preservation across SSO port changes, with open-redirect prevention via isValidReturnUrl
• Race condition protection using useRef to prevent duplicate redirects
• Deferred model prefill that waits for the available model list to load before applying
• Good test coverage across returnUrlUtils, create_key_button prefill scenarios, and the expired-token integration test
• Issue: The manual "Login with SSO" button on the login page does not forward the return URL to the SSO endpoint, unlike the auto-redirect SSO path — this can cause deep-link loss when users click the button manually

Confidence Score: 4/5

• This PR is safe to merge with one minor gap in the SSO manual login button flow.
• The changes are well-structured with proper input validation, open-redirect prevention, and race condition handling. Test coverage is good. The one functional gap (manual SSO button not forwarding return URL) is a feature incompleteness rather than a breaking issue. The indentation regression is cosmetic only.
• Pay attention to ui/litellm-dashboard/src/app/login/LoginPage.tsx (manual SSO button missing return URL forwarding) and ui/litellm-dashboard/src/app/page.tsx (indentation regression).

Sequence Diagram

sequenceDiagram
    participant User
    participant Browser
    participant PageTSX as page.tsx
    participant LoginPage as LoginPage.tsx
    participant SSO as SSO Provider
    participant CreateKey as create_key_button.tsx

    User->>Browser: Visit /ui?create=true&team_id=abc&models=gpt-4
    Browser->>PageTSX: Load with URL params
    PageTSX->>PageTSX: Parse prefillData from URL params
    alt No valid token
        PageTSX->>PageTSX: storeReturnUrl() (cookie)
        PageTSX->>Browser: Redirect to /ui/login?redirect_to=...
        Browser->>LoginPage: Load login page
        alt Auto SSO redirect
            LoginPage->>SSO: Redirect with redirect_to param
            SSO->>Browser: Redirect back with token
            Browser->>PageTSX: Load with token
        else Password login
            LoginPage->>LoginPage: consumeReturnUrl()
            LoginPage->>Browser: Redirect to return URL
            Browser->>PageTSX: Load with token + original params
        end
    end
    PageTSX->>PageTSX: consumeReturnUrl() on auth success
    PageTSX->>CreateKey: Pass autoOpenCreate + prefillData
    CreateKey->>CreateKey: Check rolesWithWriteAccess
    CreateKey->>CreateKey: Open modal, apply prefill
    CreateKey->>CreateKey: Defer model prefill until models loaded

_{Last reviewed commit: 592e227}