mirror of
https://github.com/openai/codex.git
synced 2026-04-24 22:54:54 +00:00
5882f3f95e
## Summary This PR moves Codex backend request authentication from direct bearer-token handling to `AuthProvider`. The new `codex-auth-provider` crate defines the shared request-auth trait. `CodexAuth::provider()` returns a provider that can apply all headers needed for the selected auth mode. This lets ChatGPT token auth and AgentIdentity auth share the same callsite path: - ChatGPT token auth applies bearer auth plus account/FedRAMP headers where needed. - AgentIdentity auth applies AgentAssertion plus account/FedRAMP headers where needed. Reference old stack: https://github.com/openai/codex/pull/17387/changes ## Callsite Migration | Area | Change | | --- | --- | | backend-client | accepts an `AuthProvider` instead of a raw token/header | | chatgpt client/connectors | applies auth through `CodexAuth::provider()` | | cloud tasks | keeps Codex-backend gating, applies auth through provider | | cloud requirements | uses Codex-backend auth checks and provider headers | | app-server remote control | applies provider headers for backend calls | | MCP Apps/connectors | gates on `uses_codex_backend()` and keys caches from generic account getters | | model refresh | treats AgentIdentity as Codex-backend auth | | OpenAI file upload path | rejects non-Codex-backend auth before applying headers | | core client setup | keeps model-provider auth flow and allows AgentIdentity through provider-backed OpenAI auth | ## Stack 1. https://github.com/openai/codex/pull/18757: full revert 2. https://github.com/openai/codex/pull/18871: isolated Agent Identity crate 3. https://github.com/openai/codex/pull/18785: explicit AgentIdentity auth mode and startup task allocation 4. This PR: migrate Codex backend auth callsites through AuthProvider 5. https://github.com/openai/codex/pull/18904: accept AgentIdentity JWTs and load `CODEX_AGENT_IDENTITY` ## Testing Tests: targeted Rust checks, cargo-shear, Bazel lock check, and CI.
46 lines
1.4 KiB
TOML
46 lines
1.4 KiB
TOML
[package]
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
name = "codex-cloud-tasks"
|
|
version.workspace = true
|
|
|
|
[lib]
|
|
name = "codex_cloud_tasks"
|
|
path = "src/lib.rs"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dependencies]
|
|
anyhow = { workspace = true }
|
|
chrono = { workspace = true, features = ["serde"] }
|
|
clap = { workspace = true, features = ["derive"] }
|
|
codex-client = { workspace = true }
|
|
codex-cloud-tasks-client = { workspace = true }
|
|
# TODO: codex-cloud-tasks-mock-client should be in dev-dependencies.
|
|
codex-cloud-tasks-mock-client = { workspace = true }
|
|
codex-core = { workspace = true }
|
|
codex-git-utils = { workspace = true }
|
|
codex-login = { path = "../login" }
|
|
codex-model-provider = { workspace = true }
|
|
codex-tui = { workspace = true }
|
|
codex-utils-cli = { workspace = true }
|
|
crossterm = { workspace = true, features = ["event-stream"] }
|
|
owo-colors = { workspace = true, features = ["supports-colors"] }
|
|
ratatui = { workspace = true }
|
|
reqwest = { workspace = true, features = ["json"] }
|
|
serde = { workspace = true, features = ["derive"] }
|
|
serde_json = { workspace = true }
|
|
supports-color = { workspace = true }
|
|
tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
|
|
tokio-stream = { workspace = true }
|
|
tracing = { workspace = true, features = ["log"] }
|
|
tracing-subscriber = { workspace = true, features = ["env-filter"] }
|
|
unicode-width = { workspace = true }
|
|
|
|
[dependencies.async-trait]
|
|
workspace = true
|
|
|
|
[dev-dependencies]
|
|
pretty_assertions = { workspace = true }
|