Adam Perry @ OpenAI f574946960 [codex] Report unusable MCP OAuth credentials as logged out (#26713) ...

## Why

Persisted MCP OAuth credentials were reported as authenticated whenever
a credential record existed. An expired token without a usable refresh
token could therefore appear as `OAuth` even though startup could not
authenticate with it, leaving users with a misleading status instead of
a login prompt.

## What changed

- Classify stored OAuth credentials as missing, usable, or requiring
authorization.
- Reuse the existing refresh window so near-expiry credentials without a
refresh path are also treated as logged out.
- Validate required credential fields before reporting OAuth
authentication.
- Add unit coverage for credential usability and integration coverage
for expired, unexpired, and refreshable persisted credentials.

## Validation

- `just test -p codex-rmcp-client`

f574946960 · 2026-06-09 14:18:24 -07:00

History

..

src

[codex] Report unusable MCP OAuth credentials as logged out (#26713)

2026-06-09 14:18:24 -07:00

tests

[codex] Report unusable MCP OAuth credentials as logged out (#26713)

2026-06-09 14:18:24 -07:00

BUILD.bazel

[3/4] Add executor-backed RMCP HTTP client (#18583)

2026-04-22 17:38:04 -07:00

Cargo.toml

fix(rmcp): refresh expired OAuth tokens before startup (#26482)

2026-06-05 02:31:06 +00:00