mirror of
https://github.com/openai/codex.git
synced 2026-11-06 20:20:34 +00:00
cooper-oai
219ab4043e
## What changed - Select fresh authentication for each HTTP operation on eligible OpenAI MCP connections while preserving the connection's credential source and account network policy. Stop redirects when requests carry runtime assertions. - Pass the owning thread's authentication and runtime context through app discovery, connector metadata, and trusted-access requests. Include the runtime authentication mode in MCP connection and tool-cache identities. - Give resumed actors analytics clients bound to their own authentication context, and serialize stored-credential reloads with token refresh while preserving host-provided credentials. ## Testing Add coverage for fresh request assertions, revoked account policies, redirect handling, resumed-actor isolation, and MCP uploads in dual-header and assertion-only modes. GitOrigin-RevId: f06900a6db61cd6cf53c3aa8075afeec4d5706d9
122 lines
4.7 KiB
Rust
122 lines
4.7 KiB
Rust
mod auth_status;
|
|
mod bounded_stdio_transport;
|
|
mod elicitation_client_service;
|
|
mod ema_auth;
|
|
mod ema_auth_policy;
|
|
mod ema_claims;
|
|
mod ema_exchange;
|
|
mod ema_http_client;
|
|
mod ema_identity;
|
|
mod ema_resource;
|
|
mod enterprise_oauth_login;
|
|
mod event_notification_transport;
|
|
mod executor_process_transport;
|
|
mod http_client_adapter;
|
|
mod http_client_redirect;
|
|
mod http_headers;
|
|
mod http_request_auth;
|
|
mod in_process_transport;
|
|
mod local_stdio_io;
|
|
mod local_stdio_transport;
|
|
mod logging_client_handler;
|
|
mod oauth;
|
|
mod oauth_callback;
|
|
mod oauth_client_credentials;
|
|
mod oauth_client_registration;
|
|
mod oauth_http_client;
|
|
mod oauth_refresh_mode;
|
|
mod ordered_byte_transport;
|
|
mod perform_oauth_login;
|
|
mod program_resolver;
|
|
mod protocol_mode;
|
|
mod request_cancellation;
|
|
mod request_input;
|
|
mod rmcp_client;
|
|
mod service_error;
|
|
mod startup_error;
|
|
mod stdio_server_launcher;
|
|
mod tool_list_changes;
|
|
mod trace_context;
|
|
mod user_verification;
|
|
mod utils;
|
|
mod www_authenticate;
|
|
|
|
pub use auth_status::McpAuthState;
|
|
pub use auth_status::McpLoginRequirement;
|
|
pub use auth_status::OAuthDiscoveryTimeout;
|
|
pub use auth_status::StreamableHttpOAuthDiscovery;
|
|
pub use auth_status::determine_streamable_http_auth_status;
|
|
pub use auth_status::determine_streamable_http_auth_status_from_credentials;
|
|
pub use auth_status::discover_streamable_http_oauth;
|
|
pub use codex_protocol::protocol::McpAuthStatus;
|
|
pub use ema_auth::EmaAuthTokenExchangeRequest;
|
|
pub use ema_auth::exchange_ema_auth_token;
|
|
pub use ema_auth_policy::EmaAuthFailure;
|
|
pub use ema_auth_policy::EmaCredentialKind;
|
|
pub use ema_auth_policy::EmaErrorDetail;
|
|
pub use ema_auth_policy::EmaInvalidGrantSource;
|
|
pub use ema_auth_policy::EmaTokenSourceError;
|
|
pub use ema_auth_policy::validate_ema_auth_resource;
|
|
pub use ema_exchange::EmaAccessToken;
|
|
pub use ema_http_client::EmaAuthenticatedHttpClient;
|
|
pub use ema_http_client::EmaRequestAuthority;
|
|
pub use ema_http_client::EmaTokenSource;
|
|
pub use ema_identity::EmaIdpIdentity;
|
|
pub use ema_identity::EmaIdpIdentityRequest;
|
|
pub use ema_identity::account_oidc_identity_is_usable;
|
|
pub use ema_identity::account_oidc_issuer_hint;
|
|
pub use ema_identity::resolve_ema_account_idp_identity;
|
|
pub use ema_identity::resolve_ema_idp_identity;
|
|
pub use ema_identity::stored_ema_identity_is_usable;
|
|
pub use enterprise_oauth_login::EnterpriseOAuthCredentialGuard;
|
|
pub use enterprise_oauth_login::EnterpriseOAuthCredentials;
|
|
pub use enterprise_oauth_login::EnterpriseOAuthLoginHandle;
|
|
pub use enterprise_oauth_login::EnterpriseOAuthLoginRequest;
|
|
pub use enterprise_oauth_login::delete_enterprise_oauth_tokens;
|
|
pub use enterprise_oauth_login::perform_enterprise_oauth_login_return_url;
|
|
pub use event_notification_transport::EventNotificationReceiver;
|
|
pub use http_client_adapter::StreamableHttpRedirectMode;
|
|
pub use http_headers::with_http_headers_helper;
|
|
pub use http_request_auth::AuthProviderResolver;
|
|
pub use in_process_transport::InProcessTransportFactory;
|
|
pub use oauth::EmaCredentialLease;
|
|
pub use oauth::EmaCredentialSnapshot;
|
|
pub use oauth::StoredOAuthCredentialSnapshot;
|
|
pub use oauth::StoredOAuthTokens;
|
|
pub use oauth::WrappedOAuthTokenResponse;
|
|
pub use oauth::delete_oauth_tokens;
|
|
pub use oauth::save_oauth_tokens;
|
|
pub use oauth::stored_oauth_credential_snapshot;
|
|
pub use oauth::stored_oauth_credentials;
|
|
pub use oauth_callback::McpOAuthCallbackMode;
|
|
pub use oauth_callback::resolve_mcp_oauth_callback_url;
|
|
pub use oauth_client_registration::McpOAuthClientRegistration;
|
|
pub use oauth_refresh_mode::McpOAuthRefreshMode;
|
|
pub use perform_oauth_login::OAuthProviderError;
|
|
pub use perform_oauth_login::OauthLoginHandle;
|
|
pub use perform_oauth_login::perform_oauth_login;
|
|
pub use perform_oauth_login::perform_oauth_login_return_url;
|
|
pub use perform_oauth_login::perform_oauth_login_silent;
|
|
pub use perform_oauth_login::perform_oauth_login_with_callback_input;
|
|
pub use protocol_mode::McpProtocolMode;
|
|
pub use request_cancellation::RequestScope;
|
|
pub use rmcp::model::ElicitationAction;
|
|
pub use rmcp_client::CancellableEventStreamRequest;
|
|
pub use rmcp_client::Elicitation;
|
|
pub use rmcp_client::ElicitationResponse;
|
|
pub use rmcp_client::ListToolsWithConnectorIdResult;
|
|
pub use rmcp_client::RmcpClient;
|
|
pub use rmcp_client::SendElicitation;
|
|
pub use rmcp_client::StreamableHttpBearerToken;
|
|
pub use rmcp_client::ToolWithConnectorId;
|
|
pub use service_error::is_retryable_transport_error;
|
|
pub use service_error::mcp_error;
|
|
pub use service_error::request_error_code;
|
|
pub use service_error::request_timeout_error;
|
|
pub use startup_error::is_authentication_required_error;
|
|
pub use stdio_server_launcher::ExecutorStdioServerLauncher;
|
|
pub use stdio_server_launcher::LocalStdioServerLauncher;
|
|
pub use stdio_server_launcher::StdioServerLauncher;
|
|
pub use tool_list_changes::ToolListRevision;
|
|
pub use user_verification::UserVerificationReason;
|