smurching-oai 6222faa3c4 Enable model catalog discovery with gateway OAuth (#60414) ...

## Why

Custom providers with gateway OAuth and an explicit model catalog should be able to discover models without an API key or API key model discovery enabled.

## What changed

- Enable catalog refreshes for custom gateway providers when `model_catalog_url` and `base_url` have the same origin.
- Reuse gateway credentials without starting an interactive login during catalog refreshes.
- Keep an unrelated saved API key from making gateway catalog discovery depend on the API key discovery setting.

## Testing

Add an app-server test for discovering a gateway catalog after OAuth login with no API key. Update coverage for catalog invalidation after gateway credentials require login, including across manager restarts, with API key discovery disabled.

GitOrigin-RevId: b133c428cb45a9037e4b2ef13ff2f9473ed96636

2026-11-09 16:37:22 +00:00

..

amazon_bedrock

Support credential export commands for gateway authentication (#59787)

2026-11-06 02:00:39 +00:00

gcp

Bind runtime auth to the provider's selected credential source (#59823)

2026-11-06 04:33:14 +00:00

auth_refresh_tests.rs

Consolidate async header authentication in apply_auth_headers (#57179)

2026-10-26 18:22:11 +00:00

auth_tests.rs

Extract model-provider unit tests into separate files (#58936)

2026-11-02 17:35:57 +00:00

auth.rs

Use runtime authentication for Analytics requests (#60101)

2026-11-07 10:41:36 +00:00

bearer_auth_provider_tests.rs

Extract model-provider unit tests into separate files (#58936)

2026-11-02 17:35:57 +00:00

bearer_auth_provider.rs

Extract model-provider unit tests into separate files (#58936)

2026-11-02 17:35:57 +00:00

capabilities_tests.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

capabilities.rs

Add a built-in Google Cloud Vertex AI provider (#56265)

2026-10-22 21:01:14 +00:00

catalog_factory.rs

Wire shared runtime authentication through threads and API clients (#59177)

2026-11-03 15:02:57 +00:00

chatgpt_base_url.rs

Route FedRAMP API keys to government endpoints by default (#57178)

2026-10-26 18:20:30 +00:00

client_auth.rs

Use runtime authentication for Analytics requests (#60101)

2026-11-07 10:41:36 +00:00

combined_auth.rs

Support credential export commands for gateway authentication (#59787)

2026-11-06 02:00:39 +00:00

gateway_auth.rs

Enable model catalog discovery with gateway OAuth (#60414)

2026-11-09 16:37:22 +00:00

gateway_export.rs

Retry gateway credential exports after unauthorized responses (#59816)

2026-11-06 03:51:12 +00:00

lib.rs

Apply runtime authentication to realtime connections (#60003)

2026-11-06 22:27:23 +00:00

models_endpoint_refresh_tests.rs

Bind runtime auth to the provider's selected credential source (#59823)

2026-11-06 04:33:14 +00:00

models_endpoint_runtime_auth_tests.rs

Bind runtime auth to the provider's selected credential source (#59823)

2026-11-06 04:33:14 +00:00

models_endpoint_tests.rs

Extract model-provider unit tests into separate files (#58936)

2026-11-02 17:35:57 +00:00

models_endpoint_timeout_tests.rs

Use paused time in sampler and model catalog timeout tests (#46519)

2026-09-18 23:58:56 +00:00

models_endpoint.rs

Enable model catalog discovery with gateway OAuth (#60414)

2026-11-09 16:37:22 +00:00

models_identity_tests.rs

Bind reusable backend clients to runtime authentication (#59255)

2026-11-03 23:35:00 +00:00

models_identity.rs

Bind reusable backend clients to runtime authentication (#59255)

2026-11-03 23:35:00 +00:00

models_originator_tests.rs

Preserve model metadata origin through runtime resolution (#58361)

2026-10-30 15:11:02 +00:00

provider_tests.rs

Use runtime authentication across backend request paths (#59572)

2026-11-05 05:09:32 +00:00

provider.rs

Stop retrying terminal runtime authentication denials (#60096)

2026-11-07 09:48:46 +00:00

request_preparation_tests.rs

Apply runtime authentication to realtime connections (#60003)

2026-11-06 22:27:23 +00:00

request_preparation.rs

Centralize provider request preparation auth checks (#58121)

2026-10-29 16:39:38 +00:00

request_setup.rs

Stop retrying terminal runtime authentication denials (#60096)

2026-11-07 09:48:46 +00:00

runtime_auth_tests.rs

Stop retrying terminal runtime authentication denials (#60096)

2026-11-07 09:48:46 +00:00

runtime_auth.rs

Use runtime authentication for Analytics requests (#60101)

2026-11-07 10:41:36 +00:00

shared_state_test_support.rs

Add device-code authorization for gateway OAuth (#59822)

2026-11-06 04:24:04 +00:00

shared_state_tests.rs

Enable model catalog discovery with gateway OAuth (#60414)

2026-11-09 16:37:22 +00:00

shared_state.rs

Bind runtime auth to the provider's selected credential source (#59823)

2026-11-06 04:33:14 +00:00

test_support.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

workspace_routing_tests.rs

Apply workspace routing to Guardian v2 classifier requests (#47162)

2026-09-22 02:33:29 +00:00

workspace_routing.rs

Reauthenticate runtime requests before reusing WebSocket access (#60055)

2026-11-07 04:06:26 +00:00