{"record":{"id":"4a876b09b2a24f6d","repo":"BerriAI/litellm","slug":"only-proxy-admins-can-delete-jwt-key-mappings","errorCode":null,"errorMessage":"Only proxy admins can delete JWT key mappings","messagePattern":"Only proxy admins can delete JWT key mappings","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/management_endpoints/jwt_key_mapping_endpoints.py","lineNumber":155,"sourceCode":"                detail=\"A mapping with those claim values already exists.\",\n            )\n        if \"foreign\" in error_str or \"p2003\" in error_str:\n            raise HTTPException(\n                status_code=400,\n                detail=\"The provided key does not match an existing virtual key.\",\n            )\n        raise HTTPException(status_code=500, detail=\"Failed to update JWT key mapping.\")\n\n\n@router.post(\"/jwt/key/mapping/delete\", tags=[\"JWT Key Mapping\"])\nasync def delete_jwt_key_mapping(\n    data: DeleteJWTKeyMappingRequest,\n    user_api_key_dict: UserAPIKeyAuth = Depends(user_api_key_auth),\n):\n    from litellm.proxy.proxy_server import prisma_client, user_api_key_cache\n\n    if user_api_key_dict.user_role != LitellmUserRoles.PROXY_ADMIN:\n        raise HTTPException(status_code=403, detail=\"Only proxy admins can delete JWT key mappings\")\n\n    if prisma_client is None:\n        raise HTTPException(status_code=500, detail=\"Database not connected\")\n\n    try:\n        # Get old mapping for cache invalidation\n        old_mapping: Final = await JWTKeyMappingRepository(prisma_client).table.find_unique(where={\"id\": data.id})\n\n        if old_mapping is None:\n            raise HTTPException(status_code=404, detail=\"Mapping not found\")\n\n        cache_key: Final = f\"jwt_key_mapping:{old_mapping.jwt_claim_name}:{old_mapping.jwt_claim_value}\"\n        await user_api_key_cache.async_delete_cache(cache_key)\n\n        await JWTKeyMappingRepository(prisma_client).table.delete(where={\"id\": data.id})\n        return {\"status\": \"success\"}\n    except HTTPException:\n        raise","sourceCodeStart":137,"sourceCodeEnd":173,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/jwt_key_mapping_endpoints.py#L137-L173","documentation":"Error \"Only proxy admins can delete JWT key mappings\" thrown in BerriAI/litellm.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/jwt_key_mapping_endpoints.py:155 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Authenticate with a proxy admin API key.","Ask a proxy admin to delete the JWT key mapping."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}