Skip to content

Harden OAuth callback lifecycle - #33

Merged
tiankaima merged 1 commit into
mainfrom
agent/oauth-callback-openapi
Aug 9, 2026
Merged

Harden OAuth callback lifecycle#33
tiankaima merged 1 commit into
mainfrom
agent/oauth-callback-openapi

Conversation

@tiankaima

Copy link
Copy Markdown
Member

What changed

  • deliver only the first OAuth callback without blocking
  • return explicit 409/503 responses for repeated or unavailable delivery
  • close the listener reliably and bound HTTP server shutdown to two seconds
  • add callback concurrency/lifecycle tests
  • sync the current server OpenAPI and regenerate the client

Why

Repeated browser callbacks could block a handler and make shutdown wait indefinitely, leaving the login command hung.

Validation

  • OpenAPI sync guard
  • go test -race ./...
  • go vet ./...
  • golangci-lint run ./...

@tiankaima
tiankaima marked this pull request as ready for review August 9, 2026 16:18
@tiankaima
tiankaima merged commit a7a07da into main Aug 9, 2026
4 checks passed
@tiankaima
tiankaima deleted the agent/oauth-callback-openapi branch August 9, 2026 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant