alexsong-oai 6eb51a438a Retry gateway credential exports after unauthorized responses (#59816) ...

## Why

Cached gateway command credentials need to be refreshed when the gateway rejects them with a `401`.

## What changed

Clear the cached `credential_export` token after an inference HTTP `401` or a WebSocket upgrade rejected with `401`, then rerun the command for one retry. Preserve subsequent primary authentication recovery if the retry is also unauthorized, and document the behavior.

## Testing

Add integration coverage for using a new exported token, reporting an invalid export, recovering primary authentication after the gateway retry, and stopping after a second unauthorized WebSocket upgrade.

GitOrigin-RevId: 3397476dbfd3bec1bd44f90657c4f9e17bb7df67

2026-11-06 03:51:12 +00:00

..

src

Retry gateway credential exports after unauthorized responses (#59816)

2026-11-06 03:51:12 +00:00

tests

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

BUILD.bazel

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

Cargo.toml

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00