mirror of
https://github.com/openai/codex.git
synced 2026-10-19 17:28:46 +00:00
## Why ChatGPT backend requests could bypass the configured network policy by using a default HTTP client. Requests using captured credentials must also retain the corresponding account policy so revocation continues to block them. ## What changed - Use the configured HTTP client factory for ChatGPT GET and POST requests, enforcing managed network policy while retaining cookies. - Capture authentication and network policy together for app reads and plugin reads and installs, preserving that policy across the post-install configuration reload. - Bind GET requests to the current account policy before loading credentials. ## Testing Add regression tests for revoked account policies, blocked connector destinations, and network policy enforcement after configuration reload with a cached app client. GitOrigin-RevId: 5298842eec9664af49df70e89624653d1452fb33
ChatGPT
This crate pertains to first party ChatGPT APIs and products such as Codex agent.
This crate is built and maintained by OpenAI employees. External code contributions are not accepted; please report bugs and request features in the Codex issue tracker.