Files
codex/codex-rs/http-client/src/openai_headers.rs
T
cooper-oai cf29971d93 Integrate runtime authentication into model requests (#57171)
## What changed

- Add opt-in runtime authentication through `ModelClient::with_runtime_auth`, requiring the provider and runtime manager to share the selected OpenAI credentials.
- Keep runtime identity, credentials, routing, and transport selection consistent for each request and its retries, signing a fresh assertion for each attempt.
- Apply authentication asynchronously to WebSocket handshakes, replace stale authentication headers, and reconnect when the runtime changes.
- Reject account, organization, or project selectors that conflict with the registered runtime, and preserve gateway OAuth composition.

## Testing

Add coverage for dual-header and assertion-only authentication, HTTP retries, runtime replacement and account switches, stale WebSocket headers, selector mismatches, gateway OAuth failures, transport revocation, and Realtime compatibility.

GitOrigin-RevId: 45b9efc2c80481406a0f6f6396a8cdd21d933c12
2026-10-26 18:06:07 +00:00

6 lines
257 B
Rust

//! Shared OpenAI identity and resource-selection header names.
pub const CHATGPT_ACCOUNT_ID_HEADER: &str = "chatgpt-account-id";
pub const OPENAI_ORGANIZATION_HEADER: &str = "openai-organization";
pub const OPENAI_PROJECT_HEADER: &str = "openai-project";