smurching-oai df38cb3b2a Add device-code authorization for gateway OAuth (#59822) ...

## Why

Gateway sign-in needs an alternative for terminals that cannot open a browser.

## What changed

- Add optional `gateway_oauth.device_authorization_url` configuration and a `login_with_device_code` API that presents a verification URL and user code, polls for approval, and persists the resulting credentials.
- Use the configured proxy and network policy, validate verification URLs, and bound OAuth responses. Support cancellation and report denied or expired codes without exposing issuer error details.

## Testing

Add tests for successful authorization and credential persistence, unsafe verification URLs, network-policy denials, denied and expired codes, and cancellation during approval or credential storage.

GitOrigin-RevId: 96398578fb866d34929e85c04eadf468d8cd3255

2026-11-06 04:24:04 +00:00

..

bin

…

outbound_proxy

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

route_aware_client_pool

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

windows_proxy_auth

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

chatgpt_cloudflare_cookies.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

chatgpt_hosts.rs

…

chatgpt_routing_affinity_tests.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

chatgpt_routing_affinity.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

client_builder_tests.rs

Upgrade hyper to 1.11.1 and test connection closure (#52608)

2026-10-09 15:13:29 +00:00

client_builder.rs

Tie gRPC code-mode connection lifetime to live sessions (#59783)

2026-11-06 01:49:33 +00:00

client_tls.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

client.rs

Refactor HTTP client construction and request execution (#57575)

2026-10-27 22:03:01 +00:00

custom_ca_tls_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

custom_ca.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

error.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

lib.rs

Add device-code authorization for gateway OAuth (#59822)

2026-11-06 04:24:04 +00:00

native_roots_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

native_roots.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

network_policy_tests.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

network_policy.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

openai_endpoints.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

openai_headers.rs

Integrate runtime authentication into model requests (#57171)

2026-10-26 18:06:07 +00:00

outbound_proxy_redirect_coverage_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

outbound_proxy_tests.rs

Avoid blocking async proxy resolution on the system proxy cache (#47852)

2026-09-24 14:50:27 +00:00

outbound_proxy.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

request_builder_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_builder.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_draft.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request.rs

Add opt-in response body limits to the HTTP transport (#45822)

2026-09-16 01:01:57 +00:00

response.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

retry_after_tests.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

retry_after.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

route_aware_client_pool_tests.rs

Bind reusable backend clients to runtime authentication (#59255)

2026-11-03 23:35:00 +00:00

route_aware_client_pool.rs

Extend runtime auth to account, plugin, and file requests (#59564)

2026-11-05 03:49:13 +00:00

route_aware_policy_tests.rs

Extend runtime auth to account, plugin, and file requests (#59564)

2026-11-05 03:49:13 +00:00

route_aware_redirect_integration_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_redirect_tests.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_redirect.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_tls_fallback_tests.rs

Wire native voice dependencies into full Rust CI (#58719)

2026-11-01 15:50:50 +00:00

tls_backend_fallback_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

tls_backend_fallback.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_limit_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport.rs

Add device-code authorization for gateway OAuth (#59822)

2026-11-06 04:24:04 +00:00

windows_proxy_auth.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

windows_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

windows_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00