Matthew Zeng 392ced7d3a Protect MCP OAuth persistence from stale credential writes (#60849) ...

## Why

A pending token refresh must not overwrite a newer login or recreate credentials after logout. Legacy file entries also need to retain their stored identity across refreshes.

## What changed

- Lock and revalidate stored credentials before persisting changed authorization-manager credentials, requiring authorization again if storage has changed.
- Update file-backed refreshes only when the matched entry still contains the expected credentials, preserving its key, server name, and ownership. Compare only fields the file format can persist.
- Remove matching legacy file entries when saving login credentials or deleting credentials, while preserving unrelated entries and profile-scoped enterprise credentials' separate local entries.

## Testing

Add regression coverage for newer logins and logout during pending persistence, repeated refreshes of legacy and escaped-name entries, and cleanup that preserves unrelated credentials. Update guard-retention and telemetry assertions for the validation path.

GitOrigin-RevId: 3d7c603950afcff72f0bcd943edae5ecfbcb5bd2

2026-11-11 19:18:48 +00:00

..

src

Protect MCP OAuth persistence from stale credential writes (#60849)

2026-11-11 19:18:48 +00:00

tests

Use runtime authentication for OpenAI MCP and app requests (#59749)

2026-11-05 22:03:29 +00:00

BUILD.bazel

[3/4] Add executor-backed RMCP HTTP client (#18583)

2026-04-22 17:38:04 -07:00

Cargo.toml

Prevent idle Windows MCP pipes from blocking unrelated I/O (#59726)

2026-11-05 19:46:31 +00:00