fix: add auth header to LiteLLM health check

Author: danielcopper

app/api/routes/health.py

@@ -28,7 +28,10 @@ async def health_check() -> HealthResponse:
         try:
             async with httpx.AsyncClient(timeout=5.0) as client:
                 url = f"{settings.LITELLM_BASE_URL.rstrip('/')}/health"
-                response = await client.get(url)
+                headers = {}
+                if settings.LITELLM_API_KEY:
+                    headers["Authorization"] = f"Bearer {settings.LITELLM_API_KEY}"
+                response = await client.get(url, headers=headers)
                 litellm_available = response.status_code == 200
         except Exception as e:
             logger.warning(f"LiteLLM health check failed: {e}")

tests/test_health.py

@@ -0,0 +1,68 @@
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+
+@pytest.mark.asyncio
+async def test_health_check_sends_auth_header():
+    """
+    Test that health check sends Authorization header to LiteLLM.
+    """
+    with patch("app.api.routes.health.settings") as mock_settings:
+        mock_settings.LITELLM_BASE_URL = "http://litellm:4000"
+        mock_settings.LITELLM_API_KEY = "sk-test-key"
+        mock_settings.openai_available = False
+        mock_settings.gemini_available = False
+
+        mock_response = MagicMock()
+        mock_response.status_code = 200
+
+        mock_client_instance = MagicMock()
+        mock_client_instance.get = AsyncMock(return_value=mock_response)
+
+        mock_client = MagicMock()
+        mock_client.__aenter__ = AsyncMock(return_value=mock_client_instance)
+        mock_client.__aexit__ = AsyncMock(return_value=None)
+
+        with patch("app.api.routes.health.httpx.AsyncClient", return_value=mock_client):
+            from app.api.routes.health import health_check
+
+            await health_check()
+
+            # Verify auth header was sent
+            mock_client_instance.get.assert_called_once()
+            call_args = mock_client_instance.get.call_args
+            assert "headers" in call_args.kwargs
+            assert call_args.kwargs["headers"]["Authorization"] == "Bearer sk-test-key"
+
+
+@pytest.mark.asyncio
+async def test_health_check_no_auth_when_no_key():
+    """
+    Test that health check doesn't send auth header when LITELLM_API_KEY is not set.
+    """
+    with patch("app.api.routes.health.settings") as mock_settings:
+        mock_settings.LITELLM_BASE_URL = "http://litellm:4000"
+        mock_settings.LITELLM_API_KEY = None
+        mock_settings.openai_available = False
+        mock_settings.gemini_available = False
+
+        mock_response = MagicMock()
+        mock_response.status_code = 200
+
+        mock_client_instance = MagicMock()
+        mock_client_instance.get = AsyncMock(return_value=mock_response)
+
+        mock_client = MagicMock()
+        mock_client.__aenter__ = AsyncMock(return_value=mock_client_instance)
+        mock_client.__aexit__ = AsyncMock(return_value=None)
+
+        with patch("app.api.routes.health.httpx.AsyncClient", return_value=mock_client):
+            from app.api.routes.health import health_check
+
+            await health_check()
+
+            # Verify empty headers were sent (no auth)
+            mock_client_instance.get.assert_called_once()
+            call_args = mock_client_instance.get.call_args
+            assert call_args.kwargs["headers"] == {}