jif 2623f206bd Recheck account login ownership for enterprise MCP (#55680) ...

## Why

A persisted login replacement can leave the auth cache holding the previous login, even for the same account. Enterprise MCP authorization must detect that replacement before continuing to use enterprise credentials.

## What changed

- Check cached and persisted account login ownership before enterprise MCP connections and around token exchanges, revoking authorization when ownership changes.
- Recheck account ownership and login generation before committing enterprise sign-in credentials.
- Compare complete token data when checking whether an account OAuth grant is still current, and expose grant token access and credential comparison helpers.

## Testing

Add regression coverage for detecting a same-account login replacement without updating cached auth, rejecting enterprise MCP use after replacement, and keeping ordinary MCP usable while an enterprise account storage read is blocked.

GitOrigin-RevId: 6303f88a9cbcc84c99e453dc281b23d66930f518

2026-10-20 21:34:24 +00:00

..

analytics_server.rs

Add plugin usage telemetry (#14531)

2026-03-12 19:22:30 -07:00

auth_fixtures.rs

Recheck account login ownership for enterprise MCP (#55680)

2026-10-20 21:34:24 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

Cargo.toml

Scope model catalog caches to the current provider and auth identity (#43906)

2026-09-08 20:37:30 +00:00

config_tests.rs

Retire the personality feature flag and document deprecated settings (#45809)

2026-09-15 23:39:40 +00:00

config.rs

Simplify app-server integration test setup (#34786)

2026-07-22 16:30:12 +00:00

json_logging.rs

Finish idle thread unloads after slow shutdown (#51420)

2026-10-06 17:10:19 +00:00

lib.rs

Expose selected workspace routing in app-server account reads (#45529)

2026-09-14 22:31:32 +00:00

local_websocket_exec_server.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

mock_model_server.rs

[codex] Use expect in integration tests (#28441)

2026-06-15 21:53:47 -07:00

models_cache.rs

Remove legacy personality template metadata (#51223)

2026-10-06 01:46:33 +00:00

responses.rs

Standardize shell execution on unified exec (#39757)

2026-08-20 17:46:05 +00:00

rollout.rs

Persist thread creator identity in rollouts and SQLite (#47113)

2026-09-21 21:22:01 +00:00

rpc_delay_tests.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

rpc_delay.rs

test: add delayed exec-server transport (#31427)

2026-07-09 00:17:38 +00:00

test_app_server.rs

Add experimental thread item lookup by ID (#52637)

2026-10-09 16:50:24 +00:00