Files
codex/codex-rs
jif 13ab0b254e Preserve fallback token refreshes when the keyring is unreadable (#58343)
## Why

Automatic credential storage can load fallback credentials when the keyring is unreadable, but refreshing those credentials previously failed to save the rotated tokens. Unresolvable `auth.json` symlinks could also block keyring credential updates and logout.

## What changed

- Save refreshed fallback credentials to the file store when the keyring cannot be read, while still rejecting stale credentials and refreshes after logout. Leave the unread keyring entry untouched, even if it recovers before the save.
- Allow keyring commits to proceed when fallback symlink resolution fails. Continue sharing the resolved target's commit lock for valid symlink chains so logout coordinates with concurrent refreshes.

## Testing

Add regression coverage for persistent keyring read failures, stale fallback refreshes, logout, unusable fallback symlinks, and cross-process locking through chained symlinks.

GitOrigin-RevId: 32e35f54f9791df73247ae0af40ff3795c6253ba
2026-10-30 13:59:25 +00:00
..
…
…
…
…