ee a91b0bf1bf
Add GitHub Actions OIDC token acquisition to the responses API proxy ( #55297 ) ...
## What changed
Add a `GithubOidc` implementation of `SubjectTokenSource` that requests a fresh token using a bearer credential read from stdin. Validate HTTPS request URLs and replace the audience query parameter while preserving other parameters. CLI integration is not included.
Add a token HTTP client that disables redirects and request logging, applies timeouts, and bounds response bodies. Keep token response buffers in zeroizing storage and exclude credentials, request URLs, and response bodies from errors.
Generalize the locked stdin credential reader for bounded OIDC bearer tokens while preserving API key validation.
## Testing
Add tests for fresh token acquisition, short reads, credential size limits, injection rejection, redirect refusal, and credential-safe errors and logs. Extend API key tests to retain the stricter character restrictions.
GitOrigin-RevId: fd7767178f475b8161734f29d29108c795839185
2026-10-19 15:07:37 +00:00
2026-10-17 20:54:03 +00:00
2026-10-14 07:13:22 +00:00
2026-10-09 13:15:39 +00:00
2026-10-18 22:43:56 +00:00
2026-09-30 00:51:39 +00:00
2026-10-19 14:07:10 +00:00
2026-10-15 21:35:40 +00:00
2026-10-17 02:19:20 +00:00
2026-10-19 12:30:33 +00:00
2026-10-08 20:11:43 +00:00
2026-10-17 23:34:04 +00:00
2026-10-12 11:24:22 +00:00
2026-10-16 23:56:33 +00:00
2026-09-18 00:25:37 +00:00
2026-10-15 19:51:22 +00:00
2026-09-23 00:47:34 +00:00
2026-10-09 21:29:36 +00:00
2026-10-07 22:11:14 +00:00
2026-09-30 18:49:29 +00:00
2026-10-19 12:57:15 +00:00
2026-10-01 22:32:29 +00:00
2026-09-29 13:58:09 +00:00
2026-09-29 03:32:19 +00:00
2026-10-10 08:51:21 +00:00
2026-10-10 08:51:21 +00:00
2026-10-08 19:15:17 +00:00
2026-10-16 06:06:54 +00:00
2026-10-15 10:46:59 +00:00
2026-09-25 00:20:02 +00:00
2026-09-24 01:50:36 +00:00
2026-09-14 19:12:59 +00:00
2026-10-19 14:07:10 +00:00
2026-10-19 14:08:49 +00:00
2026-10-16 19:26:46 +00:00
2026-10-17 04:02:21 +00:00
2026-10-19 14:34:11 +00:00
2026-10-06 23:28:55 +00:00
2026-09-23 22:20:34 +00:00
2026-10-17 02:13:08 +00:00
2026-10-08 20:11:43 +00:00
2026-10-16 19:08:19 +00:00
2026-10-16 15:43:21 +00:00
2026-10-15 22:25:58 +00:00
2026-10-19 10:22:38 +00:00
2026-10-13 16:15:41 +00:00
2026-10-18 01:58:02 +00:00
2026-10-07 11:18:05 +00:00
2026-10-01 09:52:54 +00:00
2026-10-16 04:42:32 +00:00
2026-10-13 17:22:34 +00:00
2026-10-14 16:48:00 +00:00
2026-10-19 09:03:12 +00:00
2026-10-10 01:25:00 +00:00
2026-10-18 22:43:56 +00:00
2026-10-14 17:56:24 +00:00
2026-10-08 16:19:09 +00:00
2026-09-29 22:24:09 +00:00
2026-10-15 23:58:30 +00:00
2026-10-14 19:07:44 +00:00
2026-10-19 11:36:21 +00:00
2026-10-15 21:29:41 +00:00
2026-10-19 11:51:02 +00:00
2026-10-02 23:26:27 +00:00
2026-10-19 11:51:02 +00:00
2026-10-15 17:36:47 +00:00
2026-10-15 22:25:58 +00:00
2026-10-19 09:09:25 +00:00
2026-10-06 21:29:35 +00:00
2026-10-17 04:02:21 +00:00
2026-10-19 10:22:38 +00:00
2026-10-10 02:54:59 +00:00
2026-10-12 18:53:49 +00:00
2026-10-19 15:07:37 +00:00
2026-10-19 14:08:49 +00:00
2026-10-19 11:02:40 +00:00
2026-10-07 07:57:14 +00:00
2026-10-15 09:49:32 +00:00
2026-09-24 18:08:31 +00:00
2026-10-15 22:25:58 +00:00
2026-10-13 22:07:59 +00:00
2026-10-15 21:07:40 +00:00
2026-10-02 00:46:14 +00:00
2026-10-12 17:52:12 +00:00
2026-10-15 19:01:43 +00:00
2026-10-19 10:48:13 +00:00
2026-10-17 04:02:21 +00:00
2026-10-19 12:30:33 +00:00
2026-10-01 18:05:05 +00:00
2026-10-13 22:40:57 +00:00
2026-10-19 13:10:35 +00:00
2026-10-16 06:06:54 +00:00
2026-10-01 15:57:03 +00:00
2026-09-23 04:25:28 +00:00
2026-09-22 23:37:39 +00:00
2026-10-08 01:12:16 +00:00
2026-10-16 21:00:02 +00:00
2026-09-23 00:47:07 +00:00
2026-10-01 15:57:03 +00:00
2026-10-07 22:11:14 +00:00
2026-10-19 15:07:37 +00:00
2026-10-17 04:02:21 +00:00
2026-10-17 20:54:03 +00:00
ee
a91b0bf1bf