Skip to content

Add an RMCP OAuth credential store adapter - #42384

Merged
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/eb1b98024322c03af94f5ab2e88c7dc4ae54893a
Sep 2, 2026
Merged

Add an RMCP OAuth credential store adapter#42384
copyberry[bot] merged 1 commit into
mainfrom
copyberry/codex-internal-to-codex-oss/eb1b98024322c03af94f5ab2e88c7dc4ae54893a

Conversation

@copyberry

@copyberry copyberry Bot commented Sep 2, 2026

Copy link
Copy Markdown

Add an RMCP OAuth credential store adapter

What changed

  • Add a test-only CredentialStore adapter that maps RMCP refreshes onto Codex's pinned OAuth credential backend.
  • Require refresh transaction guards for mutations, preserve the pinned backend, and update the runtime credential snapshot only after persistence succeeds.
  • Preserve scopes and token expiry metadata while rejecting credentials that no longer match the connection's client or issuer.

Testing

  • Cover guarded save and clear operations, persistence failures, pinned-store read failures, replacement and removal handling, and expiry round trips.

## What changed

- Add a test-only `CredentialStore` adapter that maps RMCP refreshes onto Codex's pinned OAuth credential backend.
- Require refresh transaction guards for mutations, preserve the pinned backend, and update the runtime credential snapshot only after persistence succeeds.
- Preserve scopes and token expiry metadata while rejecting credentials that no longer match the connection's client or issuer.

## Testing

- Cover guarded save and clear operations, persistence failures, pinned-store read failures, replacement and removal handling, and expiry round trips.

GitOrigin-RevId: eb1b98024322c03af94f5ab2e88c7dc4ae54893a
@copyberry
copyberry Bot force-pushed the copyberry/codex-internal-to-codex-oss/eb1b98024322c03af94f5ab2e88c7dc4ae54893a branch from 505e8f5 to 3127092 Compare September 2, 2026 23:20
@copyberry
copyberry Bot merged commit 3127092 into main Sep 2, 2026
25 of 32 checks passed
@copyberry
copyberry Bot deleted the copyberry/codex-internal-to-codex-oss/eb1b98024322c03af94f5ab2e88c7dc4ae54893a branch September 2, 2026 23:21
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant