let codex force ChatGPT login by org too#18390
Draft
rreichel3-oai wants to merge 5 commits into
Draft
Conversation
codex-rs/core/src/config/mod.rs: honor a debug-only CODEX_DISABLE_MANAGED_CONFIG env var in the main config loader so local interactive testing can ignore managed config and managed preferences outside app-server flows.
Add forced_chatgpt_org_id config parsing, runtime validation, and mutual exclusion with forced_chatgpt_workspace_id.\n\nThread org restrictions through browser and device-code login flows, auth enforcement, local auth loading, and app-server config schemas, with focused regression coverage for org restriction handling.
rreichel3-oai
force-pushed
the
rreichel3/forced-chatgpt-workspace-id-list
branch
3 times, most recently
from
fd71d7c to
e12d9db
Compare
rreichel3-oai
force-pushed
the
rreichel3/forced-chatgpt-workspace-id-list
branch
5 times, most recently
from
cd69a02 to
949782b
Compare
rreichel3-oai
force-pushed
the
rreichel3/forced-chatgpt-workspace-id-list
branch
2 times, most recently
from
e2503f3 to
d14a17b
Compare
Base automatically changed from
rreichel3/forced-chatgpt-workspace-id-list
to
main
May 14, 2026 21:11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What problem this is solving
The backend stack teaches authorize/auth enforcement about
allowed_org_id, but Codex still only knows how to force ChatGPT login to specific workspace IDs.This adds the parallel org-level config path so we can say "any workspace in this org is fine" instead of having to enumerate workspace IDs.
This is stacked on top of #18161.
What I changed
forced_chatgpt_org_idtoconfig.toml, runtime config, and app-server config surfacesforced_chatgpt_workspace_iddoesorganization_idclaimValidation
cargo test -p codex-logincargo test -p codex-app-server-protocolcargo test -p codex-core config:: --libcargo test -p codex-tui local_chatgpt_auth