fix(login): un-break sign-in — right-size the timeouts, 503 for outages, and make the slow hop visible - #455

Merged

izzywdev merged 5 commits into

claude/signin-timeout-error-2avs7q

Jul 29, 2026

Commits on Jul 29, 2026

fix(security): bound server-brokered sign-in by a whole-request budget
claude
committed
011a455
fix(login): size the sign-in timeouts to the real slow path, not the ideal one
claude
committed
306bffc
fix(security): return 503 for a provider outage, not 401
claude
committed
1c9ad0e
fix(security): make the slow sign-in hop visible in production
claude
committed
b0375aa
Merge remote-tracking branch 'origin/master' into claude/signin-timeout-error-2avs7q
claude
committed
dcdc135