Skip to content

[Bug]: Exception calling Gemini reveals API secret key in logs #6963

@psjamesh

Description

@psjamesh

What happened?

We received a 400 response code back from Gemini. The logs include the URL and, as Gemini has the API key as a query parameter, it is exposed in the logs.

Relevant log output

Traceback (most recent call last):
  File "/{PROJECT_DIR}/.venv/lib/python3.9/site-packages/litellm/main.py", line 3598, in embedding
    response = google_batch_embeddings.batch_embeddings(  # type: ignore
  File "/{PROJECT_DIR}/.venv/lib/python3.9/site-packages/litellm/llms/vertex_ai_and_google_ai_studio/gemini_embeddings/batch_embed_content_handler.py", line 113, in batch_embeddings
    response = sync_handler.post(
  File "/{PROJECT_DIR}/.venv/lib/python3.9/site-packages/litellm/llms/custom_httpx/http_handler.py", line 406, in post
    raise e
  File "/{PROJECT_DIR}/.venv/lib/python3.9/site-packages/litellm/llms/custom_httpx/http_handler.py", line 392, in post
    response.raise_for_status()
  File "/{PROJECT_DIR}/.venv/lib/python3.9/site-packages/httpx/_models.py", line 763, in raise_for_status
    raise HTTPStatusError(message, request=request, response=self)
httpx.HTTPStatusError: Client error '400 Bad Request' for url 'https://generativelanguage.googleapis.com/v1beta/models/text-embedding-004:batchEmbedContents?key={API_KEY_EXPOSED_HERE}}'
For more information check: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/400

Twitter / LinkedIn details

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions