cooper-oai b537d5a097
Enforce workspace restrictions for header authentication ( #39322 ) ...
## What changed
- Validate externally supplied header credentials against configured ChatGPT workspace restrictions using their `chatgpt-account-id` header.
- Reject header credentials with a missing or disallowed account ID, including credentials returned during refresh, without replacing the previously cached authentication.
- Document that identity headers must be bound to validated credentials because Codex uses them for managed authentication policy.
## Testing
- Add coverage for allowed, disallowed, and missing account IDs.
- Add coverage for rejecting a refresh that changes to a disallowed workspace.
GitOrigin-RevId: 3e3db2607cd8f9f1b8000472342e42e4b1cf00b2
2026-08-19 00:28:52 +00:00
2026-08-18 22:10:43 +00:00
2026-08-18 23:47:00 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 23:47:00 +00:00
2026-08-17 04:01:37 +00:00
2026-08-16 06:48:59 +00:00
2026-08-10 18:44:58 +00:00
2026-08-10 01:39:55 +00:00
2026-08-18 23:47:00 +00:00
2026-08-11 03:39:02 +00:00
2026-08-14 05:03:39 +00:00
2026-08-17 22:37:14 +00:00
2026-08-18 21:56:54 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 19:35:22 +00:00
2026-08-14 20:42:35 +00:00
2026-08-15 21:26:28 +00:00
2026-08-14 22:40:19 +00:00
2026-08-18 18:41:40 +00:00
2026-08-18 23:47:00 +00:00
2026-08-13 23:13:37 +00:00
2026-08-18 22:10:43 +00:00
2026-08-18 22:44:28 +00:00
2026-08-18 23:59:19 +00:00
2026-08-17 19:22:45 +00:00
2026-08-18 17:42:48 +00:00
2026-08-13 00:00:16 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 21:49:30 +00:00
2026-08-17 04:37:50 +00:00
2026-08-18 23:43:31 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 21:49:49 +00:00
2026-08-18 21:46:18 +00:00
2026-08-17 21:49:30 +00:00
2026-08-10 15:50:53 +00:00
2026-08-18 12:37:41 +00:00
2026-08-18 23:23:23 +00:00
2026-08-17 00:09:44 +00:00
2026-08-10 22:12:14 +00:00
2026-08-17 23:21:28 +00:00
2026-08-19 00:28:52 +00:00
2026-08-17 10:01:59 +00:00
2026-08-18 14:14:57 +00:00
2026-08-18 20:14:17 +00:00
2026-08-14 01:23:59 +00:00
2026-08-17 23:08:26 +00:00
2026-08-18 21:30:45 +00:00
2026-08-17 19:06:53 +00:00
2026-08-10 14:25:13 +00:00
2026-08-17 21:49:30 +00:00
2026-08-18 23:47:00 +00:00
2026-08-15 01:34:33 +00:00
2026-08-19 00:05:23 +00:00
2026-08-18 23:05:52 +00:00
2026-08-18 19:17:09 +00:00
2026-08-10 15:43:10 +00:00
2026-08-18 23:00:53 +00:00
2026-08-08 16:58:26 +00:00
2026-08-18 03:31:06 +00:00
2026-08-18 22:05:07 +00:00
2026-08-18 00:45:00 +00:00
2026-08-18 23:05:52 +00:00
2026-08-14 05:49:33 +00:00
2026-08-18 23:47:00 +00:00
2026-08-18 19:09:33 +00:00
2026-08-18 21:56:54 +00:00
2026-08-15 14:31:04 +00:00
2026-08-18 22:37:50 +00:00
2026-08-18 14:59:43 +00:00
2026-08-18 22:00:25 +00:00
cooper-oai
b537d5a097