codex

mirror of https://github.com/openai/codex.git synced 2026-10-21 17:48:44 +00:00

Files

T

jif ec8edd576c Refine enterprise MCP auth errors and request authority checks (#55691 )

## What changed

- Classify token-source failures by credential kind and exchange stage, with sign-in or administrator guidance that omits provider error text. Treat resource authorization failures separately from enterprise identity failures when deciding whether authentication is required.
- Add policy-bound request authority checks that return `RequestNotSent` when policy is updating or unavailable, while allowing admitted responses to finish. Support child authorities that isolate connection revocation and share response draining.
- Recheck account validity after acquiring the credential invalidation lock and check cancellation before deleting a rejected credential.

## Testing

Extend regression coverage for policy suspension during token renewal, completion of admitted requests, recovery with fresh authority, and transport retry classification. Expand provider-error tests to cover `unauthorized_client` and `invalid_client` while checking that credential text is not exposed.

GitOrigin-RevId: c0097adc35cb5fdffde1466e4bc2b5ec78114a4b

2026-10-20 22:33:14 +00:00

tests

Add timeout-aware exec-server configuration reads (#52679 )

2026-10-09 19:22:21 +00:00

accepted_tests.rs

Support host-accepted exec-server WebSockets (#39786 )

2026-08-20 19:33:48 +00:00

accepted.rs

Add observers for initial exec-server connection attempts (#52724 )

2026-10-09 23:28:38 +00:00

connection_failure.rs

Refine enterprise MCP auth errors and request authority checks (#55691 )