efrazer-oai f496b09bd1 Retry proxy CONNECT challenges with Windows authentication (#56000) ...

## Why

HTTPS requests and WebSocket connections on Windows need to authenticate when a proxy rejects `CONNECT` with status `407`.

## What changed

- Retry proxy challenges through the existing Windows authentication helper, using the signed-in user's Negotiate or NTLM credentials. Treat an origin `407` as a normal HTTP response.
- Bridge authenticated tunnels to the HTTP client through destination-specific named pipes, retaining redirect checks and TLS backend fallback without caching those tunnels across destinations.
- Carry explicit CA certificates and client identities into HTTPS proxy TLS configuration, and apply the configured connect timeout when opening authenticated HTTP tunnels.

GitOrigin-RevId: ec7d9168972a7a640350e5348cfca40307390fbf

2026-10-21 22:26:16 +00:00

..

bin

…

outbound_proxy

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

route_aware_client_pool

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

windows_proxy_auth

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

chatgpt_cloudflare_cookies.rs

Share ChatGPT cookies between HTTP and WebSocket transports (#46506)

2026-09-18 23:17:17 +00:00

chatgpt_hosts.rs

…

client_builder_tests.rs

Upgrade hyper to 1.11.1 and test connection closure (#52608)

2026-10-09 15:13:29 +00:00

client_builder.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

client_tls.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

client.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

custom_ca_tls_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

custom_ca.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

error.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

lib.rs

Add a Windows proxy authentication tunnel helper (#55994)

2026-10-21 21:50:55 +00:00

native_roots_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

native_roots.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

network_policy_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

network_policy.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

outbound_proxy_redirect_coverage_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

outbound_proxy_tests.rs

Avoid blocking async proxy resolution on the system proxy cache (#47852)

2026-09-24 14:50:27 +00:00

outbound_proxy.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

request_builder_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_builder.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_draft.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request.rs

Add opt-in response body limits to the HTTP transport (#45822)

2026-09-16 01:01:57 +00:00

response.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

retry_after_tests.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

retry_after.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

route_aware_client_pool_tests.rs

Honor network policy in remote control and recover remote execution (#47410)

2026-09-23 00:48:53 +00:00

route_aware_client_pool.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

route_aware_policy_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

route_aware_redirect_integration_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_redirect_tests.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_redirect.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_tls_fallback_tests.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

tls_backend_fallback_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

tls_backend_fallback.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_limit_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

windows_proxy_auth.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

windows_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

windows_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00