Eric Traut 76b0575c01 Instrument device auth requests with client identity ...

Problem: Device authorization requests omitted Codex client identity metadata, limiting detection and investigation of third-party device-flow reuse.

Solution: Send the existing originator, User-Agent, and trusted-path installation ID on both device-auth endpoints while withholding the durable ID from custom issuers. Manually verified production user-code issuance and repeated token polling with an isolated CODEX_HOME, then cancelled before authorization with no tokens persisted.

2026-07-08 14:15:39 -07:00

..

common

test: add TestAppServer builder (#31425)

2026-07-07 22:20:48 +00:00

suite

Instrument device auth requests with client identity

2026-07-08 14:15:39 -07:00

all.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00