Skip to content

Surface SDK auth warnings for revoked/deleted API keys - #25

Merged
manas-fortifyroot merged 1 commit into
fr-v0.52.6.xfrom
fix/sdk-auth-warning-revoked-deleted-keys
May 26, 2026
Merged

Surface SDK auth warnings for revoked/deleted API keys#25
manas-fortifyroot merged 1 commit into
fr-v0.52.6.xfrom
fix/sdk-auth-warning-revoked-deleted-keys

Conversation

@manas-fortifyroot

Copy link
Copy Markdown

Summary

  • Added FortifyRoot OTLP exporter wrappers for traces, metrics, and logs.
  • Detects HTTP 401/403 and gRPC UNAUTHENTICATED/PERMISSION_DENIED.
  • Emits clear FortifyRoot SDK auth warning messages for invalid, revoked, deleted, or permission-missing SDK API keys.
  • Dedupes warnings by signal/status/endpoint with TTL to avoid retry spam.
  • Prevents SDK auth-warning logs from being re-exported through the OTLP log pipeline.
  • Fixed HTTP-vs-gRPC endpoint detection in metrics/logging to use URL scheme parsing.
  • Added FortifyRoot-owned tests for HTTP, gRPC, endpoint-aware dedupe, mock collector integration, and logging-handler filtering.

Tests

  • uv run ruff check traceloop/sdk/exporters/auth_warnings.py traceloop/sdk/logging/logging.py tests/test_fortifyroot_auth_warnings.py
  • uv run pytest tests/test_fortifyroot_auth_warnings.py tests/test_sdk_initialization.py -q
  • ./scripts/run-tests.sh --package 'traceloop-sdk'

@manas-fortifyroot
manas-fortifyroot merged commit 2c87e48 into fr-v0.52.6.x May 26, 2026
9 checks passed
@manas-fortifyroot
manas-fortifyroot deleted the fix/sdk-auth-warning-revoked-deleted-keys branch May 26, 2026 07:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant