mirror of https://github.com/openai/codex.git synced 2026-10-21 05:22:21 +00:00

Files

T

Michael Bolin d4fcb2873b Honor configured proxy routes for auth refreshes (#34655 )

## Why

ChatGPT token refresh requests need to follow the same configured routing policy as other authentication traffic, including environments that use the system proxy.

## What changed

- Require an `AuthRouteConfig` throughout login, logout, token refresh, personal access token, and agent identity flows.
- Build auth HTTP clients directly from that configuration instead of falling back to a default HTTP client when routing configuration is absent.

## Testing

- Add an integration test that refreshes a token through a cached system-proxy route and verifies the proxy receives the expected request.

GitOrigin-RevId: 7d54ab3219939a49921c51faf08cd4c2eabca51c

2026-07-22 02:26:16 +00:00

.cargo

fix: address quick-xml security advisories (#30941 )

2026-07-02 10:59:00 -07:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

agent-graph-store

[codex] Inject agent graph store into ThreadManager (#29736 )

2026-06-24 13:24:10 -07:00

agent-identity

Migrate agent identity to the shared HTTP client (#34631 )

2026-07-21 22:44:43 +00:00

analytics

Attribute external agent imports by provider (#34451 )

2026-07-21 02:59:22 +00:00

ansi-escape

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

app-server

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

app-server-client

Remove the personality migration (#32274 )

2026-07-10 21:24:03 +00:00

app-server-daemon

Honor system proxy settings in the daemon updater (#34495 )

2026-07-21 08:50:21 +00:00

app-server-protocol

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

app-server-test-client

Handle Amazon Bedrock credentials during logout (#33175 )

2026-07-14 21:54:24 +00:00

app-server-transport

Require auth managers to receive routing configuration (#34650 )

2026-07-22 01:35:06 +00:00

apply-patch

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

arg0

Preserve custom arg0 for sandboxed exec-server processes (#34497 )

2026-07-21 08:59:41 +00:00

async-utils

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

aws-auth

feat: enable AWS login credentials for Bedrock auth (#21623 )

2026-05-08 04:07:59 +00:00

backend-client

Add backend client support for Codex user settings (#34559 )

2026-07-21 15:00:18 +00:00

bwrap

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

chatgpt

Enrich app/read connector metadata (#34417 )

2026-07-20 22:06:50 +00:00

cli

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

cloud-config

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

cloud-tasks

Require auth managers to receive routing configuration (#34650 )

2026-07-22 01:35:06 +00:00

cloud-tasks-client

Route backend requests through the HTTP client factory (#34490 )

2026-07-21 08:28:51 +00:00

cloud-tasks-mock-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

code-mode

Add audio output support to dynamic tools and code mode (#34080 )

2026-07-18 23:22:13 +00:00

code-mode-host

fix: update crossbeam-epoch for RUSTSEC-2026-0204 (#31308 )

2026-07-06 16:26:56 -07:00

code-mode-protocol

Add buffered code-mode exec yields (#34441 )

2026-07-21 02:07:13 +00:00

codex-api

Avoid cloning Responses WebSocket payloads (#34381 )

2026-07-20 17:18:25 +00:00

codex-backend-openapi-models

[1/5] [codex] sync managed-layer bundle schema (#31285 )

2026-07-07 13:00:44 -07:00

codex-client

Extract shared HTTP transport into codex-http-client (#31323 )

2026-07-07 01:12:24 +00:00

codex-experimental-api-macros

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

codex-home

[codex] Bind shell snapshots to retained thread environments (#28421 )

2026-06-15 20:10:53 -07:00

codex-mcp

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

collaboration-mode-templates

[prompting] updated plan mode prompt (#29301 )

2026-06-21 13:35:25 -07:00

config

Enforce exact values from managed config requirements (#34597 )

2026-07-21 19:08:58 +00:00

connectors

Add keyed shell environment policy filters (#34590 )

2026-07-21 18:23:26 +00:00

context-fragments

core: rename metadata -> internal_chat_message_metadata_passthrough (#28968 )

2026-06-22 11:11:25 -07:00

core

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

core-api

Allow injecting the Codex Apps tools cache (#33113 )

2026-07-14 17:10:04 +00:00

core-plugins

Verify Git plugin SHA checkouts (#34644 )

2026-07-22 01:20:13 +00:00

core-skills

Migrate login HTTP construction to HttpClient (#34643 )

2026-07-22 00:50:28 +00:00

docs

protocol: remove submission-side serde from Op (#26674 )

2026-06-05 15:41:13 -07:00

exec

Require auth managers to receive routing configuration (#34650 )

2026-07-22 01:35:06 +00:00

exec-server

Harden managed proxy setup for sandboxed executions (#34641 )

2026-07-22 00:31:30 +00:00

exec-server-protocol

Add exec-server network policy callback types (#34620 )

2026-07-21 21:54:31 +00:00

execpolicy

Migrate legacy exec policy allow rules (#34271 )

2026-07-20 06:13:29 +00:00

ext

Migrate login HTTP construction to HttpClient (#34643 )

2026-07-22 00:50:28 +00:00

external-agent-migration

Make external session detection limits configurable (#34449 )

2026-07-21 02:55:11 +00:00

features

Always assign response item IDs (#34645 )

2026-07-22 01:23:44 +00:00

feedback

Remove unused Rust helpers (#34345 )

2026-07-20 13:45:29 +00:00

file-search

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

file-system

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

hooks

Update tests for history and hook API changes (#34403 )

2026-07-20 20:06:58 +00:00

http-client

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

install-context

Detect Codex installs managed by pnpm (#31503 )

2026-07-08 12:17:58 -04:00

keyring-store

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

linux-sandbox

Harden managed proxy setup for sandboxed executions (#34641 )

2026-07-22 00:31:30 +00:00

lmstudio

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

mcp-server

Propagate approval rejection reasons (#34400 )

2026-07-20 19:23:21 +00:00

memories

Always assign response item IDs (#34645 )

2026-07-22 01:23:44 +00:00

message-history

Add bounded batch lookups for message history (#33902 )

2026-07-17 20:52:42 +00:00

model-provider

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

model-provider-info

Support custom transports for Amazon Bedrock (#33695 )

2026-07-16 21:41:00 +00:00

models-manager

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

network-proxy

Harden managed proxy setup for sandboxed executions (#34641 )

2026-07-22 00:31:30 +00:00

ollama

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

otel

Extend second-based latency histogram buckets (#34375 )

2026-07-20 16:25:57 +00:00

plugin

Make selected plugin roots URI-native (#28918 )

2026-06-23 22:51:19 +01:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

Attribute review findings to repository rules (#34637 )

2026-07-21 23:17:20 +00:00

protocol

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

response-debug-context

…

responses-api-proxy

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

rmcp-client

Launch managed network proxies on remote executors (#33906 )

2026-07-17 21:20:14 +00:00

rollout

Load paginated model context across rollout lineages (#34621 )

2026-07-21 21:58:41 +00:00

rollout-trace

Optimize remote compaction history handling (#34431 )

2026-07-20 23:30:30 +00:00

sandboxing

Route Windows sandbox proxy traffic by restricting SID (#34613 )

2026-07-21 21:06:04 +00:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

shell-command

Strengthen forced rm command detection (#33464 )

2026-07-16 01:12:14 +00:00

shell-escalation

release: publish standalone zsh artifacts (#30114 )

2026-06-25 13:56:08 -07:00

skills

Move shared skill models into codex-skills (#34429 )

2026-07-20 23:22:48 +00:00

state

Record rollout boundaries for materialized turns (#34562 )

2026-07-21 15:10:42 +00:00

stdio-to-uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

terminal-detection

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

test-binary-support

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

thread-manager-sample

Remove CSV-backed agent jobs (#34413 )

2026-07-20 21:00:17 +00:00

thread-store

Load paginated model context across rollout lineages (#34621 )

2026-07-21 21:58:41 +00:00

tools

Add audio variants to user input protocols (#33923 )

2026-07-17 23:14:37 +00:00

tui

Require auth managers to receive routing configuration (#34650 )

2026-07-22 01:35:06 +00:00

uds

Disable empty Cargo test targets (#21584 )

2026-05-07 15:44:17 -07:00

utils

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

v8-poc

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

vendor

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

websocket-client

Resolve outbound proxy routes explicitly (#34435 )

2026-07-21 00:33:04 +00:00

windows-sandbox-rs

Harden Windows elevated sandbox startup (#34629 )

2026-07-21 22:36:18 +00:00

.gitignore

…

BUILD.bazel

bench: add e2e benchmark entrypoints (#31428 )

2026-07-09 17:31:44 -07:00

Cargo.lock

Migrate core test support to the shared HTTP client (#34651 )

2026-07-22 01:47:48 +00:00

Cargo.toml

Remove CSV-backed agent jobs (#34413 )

2026-07-20 21:00:17 +00:00

clippy.toml

…

config.md

Use canonical links in the moved config notice (#32326 )

2026-07-11 03:27:51 +00:00

default.nix

…

deny.toml

Migrate core test support to the shared HTTP client (#34651 )

2026-07-22 01:47:48 +00:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation