smurching-oai 09ec2451bf Add request-scoped OAuth credentials and session lifecycle APIs (#56036) ...

## What changed

- Add `OAuthSessionRequest` to pair access tokens with their authorization identity and retain rejected-token recovery across transient failures and retries. New sign-ins receive an identity that survives token refresh.
- Expose explicit login, logout, and authorization identity lookup, plus a per-manager option to disable automatic browser login while allowing credential reuse and refresh.
- Move serializable `OAuthSessionConfig` into `codex-model-provider-info`, add an optional `device_authorization_url` field, and share endpoint URL validation through `codex-http-client`.
- Distinguish permission failures, transient token endpoint failures, and invalid responses using `io::ErrorKind`.

## Testing

Add coverage for sign-in identity preservation through refresh retries, removal of saved and cached credentials on logout, and suppression of automatic browser login. Extend token endpoint error classification coverage.

GitOrigin-RevId: ae9f72e787171e179fe139a3b840a9f7e1e46506

2026-10-22 01:07:13 +00:00

..

capabilities.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

gateway_oauth_tests.rs

Handle unknown error classifications and configure gateway OAuth (#46482)

2026-09-18 22:29:16 +00:00

gateway_oauth.rs

Add request-scoped OAuth credentials and session lifecycle APIs (#56036)

2026-10-22 01:07:13 +00:00

lib.rs

Add request-scoped OAuth credentials and session lifecycle APIs (#56036)

2026-10-22 01:07:13 +00:00

model_provider_info_tests.rs

Add capability overrides for custom model providers (#50459)

2026-10-02 23:26:27 +00:00

oauth_session.rs

Add request-scoped OAuth credentials and session lifecycle APIs (#56036)

2026-10-22 01:07:13 +00:00