strix/strix
Jonathan Singer 3d419d312f review: harden OAuth state check and tighten error handling
Address self-review findings ahead of code review:
- auth_cli: require the OAuth `state` on the automated loopback callback
  (reject missing/mismatched — CSRF), keep manual paste lenient since it's
  user-initiated. Add tests for _finish state handling.
- codex: drop the redundant chatgpt-account-id from client default_headers;
  the per-request auth hook already stamps it (single source of truth).
- main: tighten the "sign-in expired" hint to match `error code: 401` /
  `http 401` rather than a bare "401" substring that could misfire.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-22 16:14:09 -04:00
..
agents sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-stage Go build, drop ZAP) (#474) 2026-07-22 07:25:38 -07:00
auth review: harden OAuth state check and tighten error handling 2026-07-22 16:14:09 -04:00
config feat(auth): sign in with a ChatGPT subscription for inference 2026-07-22 16:03:24 -04:00
core feat(auth): sign in with a ChatGPT subscription for inference 2026-07-22 16:03:24 -04:00
interface review: harden OAuth state check and tighten error handling 2026-07-22 16:14:09 -04:00
report feat(auth): sign in with a ChatGPT subscription for inference 2026-07-22 16:03:24 -04:00
runtime revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids, keep serialization lock (#799) 2026-07-17 13:18:40 -07:00
skills fix(prompt): make root agent orchestrate-only and fold fixing into reporting 2026-07-22 02:56:49 -07:00
telemetry feat(auth): sign in with a ChatGPT subscription for inference 2026-07-22 16:03:24 -04:00
tools docs(reporting): add CVSS calibration guidance to reduce severity inf… (#821) 2026-07-21 09:17:22 -04:00
utils fix(agent): fix tool schemas not retrieved on pyinstaller binary and validate tool call args 2026-01-14 10:57:32 -08:00
viewer feat(auth): sign in with a ChatGPT subscription for inference 2026-07-22 16:03:24 -04:00
__init__.py Open-source release for Alpha version 2025-08-08 20:36:44 -07:00