Skip to content

v1.0.2

Choose a tag to compare

View all tags
@mathsgod mathsgod released this 08 Oct 04:41
v1.0.2
1539fd3

Fix Codex CIMD login failing with invalid_client when its metadata document includes both 127.0.0.1 and localhost callback alternatives.

  • Accept the exact HTTP localhost hostname in CIMD callback metadata while preserving existing database client validation.
  • Keep variable-port matching limited to loopback IP callbacks; callback host and path validation remain enforced.
  • Keep metadata fetching protections against localhost and private network destinations.
  • Document callback behavior and add regression coverage using Codex's metadata shape.

Validation: 30 relevant tests completed, with 2 environment-dependent tests skipped; the actual Codex document and reported callback also passed local validation.

Assets 2
Loading