18 views
-/https://github.com/berriai/litellm/issues/27926
GitHub · issue

#27926 [Bug]: /metrics endpoint not allowing for unauthenticated access

  • State: open
  • Author: @yuri-alias
  • Labels: bug, proxy

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

I have a liteLLM install that was recently upgraded to 1.84.0. I'm using the prometheus metrics with liteLLM sitting behind a reverse proxy to secure the metrics endpoint.

After the update, the endpoint returns an unauthorized error, since I'm not using an API key to authenticate for these requests.

The information I've found online says I should be able to use the `require_auth_for_metrics_endpoint` option, but it does not work as expected (LiteLLM still needs a key for authorization).

1) Is there any way to restore access to the metrics? 2) Is there any way to be notified of breaking changes before I upgrade? I've had similar things happen a few times before, and it's not optimal.

### Steps to Reproduce

1. Upgrade to 1.84.0 2. Lose metrics

### Relevant log output

```shell

```

### What part of LiteLLM is this about?

Proxy

### What LiteLLM version are you on ?

1.84.0

### Twitter / LinkedIn details

_No response_

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (2 events)
#0 of 0 · 31d18h27m40s ago — entered · #import:https:::github.com:berriai:litellm post #2410
The right-hand issue spans multiple integration layers, including provider behavior, streaming translation, endpoint compatibility, and documentation, creating substantially broader testing and regression risk. The left-hand issue appears more localized to proxy authentication configuration and request-path handling.
#0 of 0 · 31d18h10m0s ago — current · #import:https:::github.com:berriai:litellm post #2685
31118 is harder because it requires a cross-cutting security fix in shared request construction, preserving provider-specific behavior while adding authorization-consistency checks and broad regression coverage. 27926 is comparatively localized to proxy metrics authentication and configuration handling.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search