lsingh-oai 30c1058df6
Preserve ChatGPT authentication for Gov MCP servers ( #54170 ) ...
## Why
MCP servers at `https://gov.chatgpt.com ` were treated as untrusted for ChatGPT authentication and switched to OAuth, preventing local Gov Apps from retaining the ChatGPT auth provider.
## What changed
Trust the `https://gov.chatgpt.com ` origin alongside the existing ChatGPT origin when resolving MCP server authentication. Origin matching preserves scheme, host, and port restrictions.
## Testing
Add regression coverage for Gov Apps URL construction, trusted origin normalization, rejection of lookalike hosts and nonstandard schemes or ports, and retention of the local ChatGPT auth provider. Verify that explicit OAuth servers and servers in remote environments do not receive the host provider.
GitOrigin-RevId: 7ceaf7c524d963005d9f23204489bbde269f0dd5
(cherry picked from commit 160b2b1ef6
2026-10-15 09:51:20 -07:00
2026-10-12 13:39:54 +00:00
2026-10-07 12:47:04 +00:00
2026-10-09 13:15:39 +00:00
2026-10-08 05:29:11 +00:00
2026-09-30 00:51:39 +00:00
2026-10-13 16:15:41 +00:00
2026-10-11 15:57:06 +00:00
2026-10-08 20:11:43 +00:00
2026-10-12 11:24:22 +00:00
2026-10-08 20:11:43 +00:00
2026-10-06 17:26:19 +00:00
2026-10-12 11:24:22 +00:00
2026-10-12 15:43:27 +00:00
2026-09-18 00:25:37 +00:00
2026-10-06 23:44:17 +00:00
2026-09-23 00:47:34 +00:00
2026-10-09 21:29:36 +00:00
2026-10-07 22:11:14 +00:00
2026-09-30 18:49:29 +00:00
2026-10-13 16:23:44 +00:00
2026-10-01 22:32:29 +00:00
2026-09-29 13:58:09 +00:00
2026-09-29 03:32:19 +00:00
2026-10-10 08:51:21 +00:00
2026-10-10 08:51:21 +00:00
2026-10-08 19:15:17 +00:00
2026-10-10 02:14:13 +00:00
2026-10-13 15:24:00 +00:00
2026-09-25 00:20:02 +00:00
2026-09-24 01:50:36 +00:00
2026-10-15 09:51:20 -07:00
2026-10-13 07:32:21 +00:00
2026-10-10 01:25:00 +00:00
2026-10-15 08:17:20 -07:00
2026-10-06 23:28:55 +00:00
2026-09-23 22:20:34 +00:00
2026-10-09 20:36:17 +00:00
2026-10-08 20:11:43 +00:00
2026-10-13 16:57:54 +00:00
2026-10-14 11:57:06 -07:00
2026-10-08 13:45:19 +00:00
2026-10-13 15:25:12 +00:00
2026-10-13 16:15:41 +00:00
2026-10-13 16:57:54 +00:00
2026-10-07 11:18:05 +00:00
2026-10-01 09:52:54 +00:00
2026-10-07 17:59:22 +00:00
2026-10-13 17:22:34 +00:00
2026-10-01 15:57:03 +00:00
2026-10-13 15:05:16 +00:00
2026-10-10 01:25:00 +00:00
2026-10-13 12:51:12 +00:00
2026-10-09 15:13:29 +00:00
2026-10-08 16:19:09 +00:00
2026-09-29 22:24:09 +00:00
2026-10-09 15:29:50 +00:00
2026-10-08 20:11:43 +00:00
2026-10-10 19:43:24 +00:00
2026-10-08 20:11:43 +00:00
2026-10-07 18:32:50 +00:00
2026-10-02 23:26:27 +00:00
2026-10-06 01:46:33 +00:00
2026-10-14 11:57:06 -07:00
2026-10-12 23:46:16 +00:00
2026-10-13 10:21:42 +00:00
2026-10-06 21:29:35 +00:00
2026-10-10 01:14:28 +00:00
2026-10-13 15:05:16 +00:00
2026-10-10 02:54:59 +00:00
2026-10-12 18:53:49 +00:00
2026-10-07 22:11:14 +00:00
2026-10-14 12:05:05 -07:00
2026-10-10 01:25:00 +00:00
2026-10-07 07:57:14 +00:00
2026-10-09 22:11:30 +00:00
2026-09-24 18:08:31 +00:00
2026-10-08 16:19:09 +00:00
2026-10-08 20:11:43 +00:00
2026-10-10 01:25:00 +00:00
2026-10-02 00:46:14 +00:00
2026-10-12 17:52:12 +00:00
2026-10-13 07:32:21 +00:00
2026-10-10 01:25:00 +00:00
2026-10-10 01:25:00 +00:00
2026-10-13 16:57:54 +00:00
2026-10-01 18:05:05 +00:00
2026-10-10 01:25:00 +00:00
2026-10-01 15:57:03 +00:00
2026-09-23 04:25:28 +00:00
2026-09-22 23:37:39 +00:00
2026-10-08 01:12:16 +00:00
2026-10-12 16:58:24 +00:00
2026-09-23 00:47:07 +00:00
2026-10-01 15:57:03 +00:00
2026-10-07 22:11:14 +00:00
2026-10-13 16:15:41 +00:00
2026-10-13 16:15:41 +00:00
2026-10-12 13:39:54 +00:00
lsingh-oai
30c1058df6