From d1fe648cdc5e72d0e756d39e1b7bdb1b05dc4e0c Mon Sep 17 00:00:00 2001 From: Steven Lee Date: Tue, 7 Jul 2026 16:36:42 +0000 Subject: [PATCH] Keep RMCP refresh TODO repository-neutral --- codex-rs/rmcp-client/src/oauth/refresh_transaction.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/codex-rs/rmcp-client/src/oauth/refresh_transaction.rs b/codex-rs/rmcp-client/src/oauth/refresh_transaction.rs index 1ab4c14b80..275dbb601e 100644 --- a/codex-rs/rmcp-client/src/oauth/refresh_transaction.rs +++ b/codex-rs/rmcp-client/src/oauth/refresh_transaction.rs @@ -184,8 +184,8 @@ impl OAuthPersistor { // variant. Match RMCP's own request path for now so rejected refresh tokens // prompt reauthorization instead of surfacing as generic MCP startup failures. // This can also prompt reauthorization after a transient failure. - // TODO: Once modelcontextprotocol/rust-sdk#963 is available in the RMCP version - // used by Codex, map only its typed refresh-token rejection error here. + // TODO: When RMCP exposes a typed distinction for refresh-token rejection, + // map only that definitive rejection to `AuthorizationRequired` here. warn!( error = %error, "MCP OAuth refresh failed; reauthorization required by RMCP compatibility policy"