mirror of
https://github.com/openai/codex.git
synced 2026-10-27 18:48:37 +00:00
## What changed - Add opt-in runtime authentication through `ModelClient::with_runtime_auth`, requiring the provider and runtime manager to share the selected OpenAI credentials. - Keep runtime identity, credentials, routing, and transport selection consistent for each request and its retries, signing a fresh assertion for each attempt. - Apply authentication asynchronously to WebSocket handshakes, replace stale authentication headers, and reconnect when the runtime changes. - Reject account, organization, or project selectors that conflict with the registered runtime, and preserve gateway OAuth composition. ## Testing Add coverage for dual-header and assertion-only authentication, HTTP retries, runtime replacement and account switches, stale WebSocket headers, selector mismatches, gateway OAuth failures, transport revocation, and Realtime compatibility. GitOrigin-RevId: 45b9efc2c80481406a0f6f6396a8cdd21d933c12
29 lines
885 B
Rust
29 lines
885 B
Rust
//! Ephemeral OpenAI runtimes: composite registration and per-request assertions.
|
|
|
|
mod actor;
|
|
mod auth;
|
|
mod bootstrap;
|
|
mod manager;
|
|
mod registration;
|
|
mod runtime;
|
|
|
|
pub use actor::AgentHost;
|
|
pub use actor::AuthenticatedActor;
|
|
pub use bootstrap::ActorInfo;
|
|
pub use bootstrap::AgentHostAuthorization;
|
|
pub use bootstrap::AuthenticatedActorAuthorization;
|
|
pub use bootstrap::RuntimeRegistrationMetadata;
|
|
pub use bootstrap::RuntimeRegistrationRequest;
|
|
pub use bootstrap::RuntimeRegistrationResponse;
|
|
pub use bootstrap::RuntimeRole;
|
|
|
|
pub use auth::RuntimeAuth;
|
|
pub use manager::RuntimeAuthError;
|
|
pub use manager::RuntimeAuthManager;
|
|
pub use registration::DEFAULT_REGISTRATION_URL;
|
|
pub use registration::RegistrationError;
|
|
pub use registration::RegistrationErrorCode;
|
|
pub use registration::RuntimeRegistrationClient;
|
|
pub use runtime::RuntimeAgentInstance;
|
|
pub use runtime::RuntimeRegistration;
|