openai/codex
1
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-08-23 13:09:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
codex/codex-rs/workload-identity
History
cooper-oai 12933b6955 Forward workload identity context during token exchange (#38767) 
## What changed

- Read optional workload identity context from `OPENAI_WORKLOAD_IDENTITY_CONTEXT` and forward it unchanged as the `workload_identity_context` token exchange field.
- Treat the context as sensitive by redacting it from session configuration debug output and removing it from model-reachable child environments.
- Include the context in workload identity session fingerprints so sessions with different values cannot share an exchange.

## Testing

- Cover request forwarding, debug redaction, session compatibility, and child-environment scrubbing.

GitOrigin-RevId: fb50700478cf54d9d604944a4ed3e77acc928a0f
2026-08-15 14:31:04 +00:00
..
src
Forward workload identity context during token exchange (#38767)
2026-08-15 14:31:04 +00:00
BUILD.bazel
Add workload identity token exchange support (#37610)
2026-08-08 17:18:02 +00:00
Cargo.toml
Add workload identity token exchange support (#37610)
2026-08-08 17:18:02 +00:00