mirror of
https://github.com/openai/codex.git
synced 2026-10-22 17:58:46 +00:00
## What changed - Extend app-server tests for account credential reuse, refresh races, stale bearer rejection, retry exhaustion, and step-up failures at the identity provider and resource authorization server. - Assert token-exchange request fields and enterprise protocol negotiation while preserving the ordinary MCP handshake. - Add core scenarios for permission and tool-policy refreshes, policy revocation, and thread removal, including cancellation of in-flight enterprise calls. - Snapshot conversation history after revocation to verify that prior calls remain visible and ordinary tools continue working. - Allow the existing startup-failure test to wait through the MCP startup deadline. GitOrigin-RevId: 31cf71a28f91bd30746b74df8fa669edb6bc23a1