strix

forkless/strix

Fork 0

mirror of https://github.com/usestrix/strix.git synced 2026-08-21 18:52:47 +02:00

Files

T

History

Jonathan SingerandClaude Fable 5 3d419d312f review: harden OAuth state check and tighten error handling

Address self-review findings ahead of code review:
- auth_cli: require the OAuth `state` on the automated loopback callback
  (reject missing/mismatched — CSRF), keep manual paste lenient since it's
  user-initiated. Add tests for _finish state handling.
- codex: drop the redundant chatgpt-account-id from client default_headers;
  the per-request auth hook already stamps it (single source of truth).
- main: tighten the "sign-in expired" hint to match `error code: 401` /
  `http 401` rather than a bare "401" substring that could misfire.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-22 16:14:09 -04:00

agents

sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-stage Go build, drop ZAP) (#474 )

2026-07-22 07:25:38 -07:00

auth

review: harden OAuth state check and tighten error handling

2026-07-22 16:14:09 -04:00

config

feat(auth): sign in with a ChatGPT subscription for inference

2026-07-22 16:03:24 -04:00

core

feat(auth): sign in with a ChatGPT subscription for inference