alexsong-oai cc2f80d515 Add file-backed storage for gateway OAuth credentials (#58219) ...

## What changed

Allow gateway OAuth configuration to select `credentials_store = "file"` to persist credentials in plaintext at `$CODEX_HOME/secrets/gateway_oauth.json`. Keep `keyring` as the default.

Read, update, and delete file-backed credentials by credential ID, using atomic writes and the existing cross-process lock. Preserve the serialized provider identity when using the default store.

## Testing

Add an app-server test that completes gateway OAuth login with file storage, verifies Unix file permissions are `0600`, and checks that login remains successful after a server restart.

GitOrigin-RevId: dc1d17922bd80bf65034cbc5aa3d97959e962dcc

2026-10-30 02:28:51 +00:00

..

src

Add file-backed storage for gateway OAuth credentials (#58219)

2026-10-30 02:28:51 +00:00

tests

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

BUILD.bazel

feat: add opt-in provider runtime abstraction (#17713)

2026-04-17 02:27:45 +00:00

Cargo.toml

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00