Skip to content

Fix device authorization polling state and add test CI - #1

Merged
coela-oss merged 2 commits into
mainfrom
codex/security-ci-20261001
Oct 1, 2026
Merged

coela-oss merged 2 commits into
mainfrom
codex/security-ci-20261001

Conversation

@coela-oss

Copy link
Copy Markdown
Contributor

Device authorization polling returns a deadline but previously lost updated polling state, including cumulative slow_down intervals. Return an immutable updated attempt, preserve increasing intervals, reject polling at expiration, and document how callers carry state forward. Update TypeScript declarations and add regression coverage for consecutive slow_down responses and early polling.

Add PR/main test CI using commit-pinned official Actions, read-only contents permissions, and disabled persisted checkout credentials.

Validation: reviewed source and regression tests; local execution is unavailable in this session. GitHub CI must pass before merging. Returning attempt adds a field to pending results; callers using exact object comparisons must update. Old attempt reuse remains a caller responsibility and is documented. No changes to OAuth scopes, credentials, publication, or main branch settings.

@coela-oss
coela-oss marked this pull request as ready for review October 1, 2026 09:53
@coela-oss
coela-oss merged commit 4c880c6 into main Oct 1, 2026
2 checks passed
@coela-oss
coela-oss deleted the codex/security-ci-20261001 branch October 1, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant