From fa6ba8f2d93c27cb97de2adc5ab073317ab3e6de Mon Sep 17 00:00:00 2001
From: Michael Bolin <mbolin@openai.com>
Date: Thu, 5 Jun 2025 22:00:15 -0700
Subject: [PATCH] fix: truncate auth.json file before rewriting it

---
 codex-rs/login/src/lib.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/codex-rs/login/src/lib.rs b/codex-rs/login/src/lib.rs
index 34c88f589c..390af74acc 100644
--- a/codex-rs/login/src/lib.rs
+++ b/codex-rs/login/src/lib.rs
@@ -75,7 +75,7 @@ pub async fn try_read_openai_api_key(codex_home: &Path) -> std::io::Result<Strin
         auth_dot_json.last_refresh = Utc::now();
 
         let mut options = OpenOptions::new();
-        options.write(true).create(true);
+        options.truncate(true).write(true).create(true);
         #[cfg(unix)]
         {
             options.mode(0o600);