zhengyubai 660c908585 fix(auth): classify refresh failures and keep transient ones recoverable ...

Restored from the pre-rewrite branch head 342d44efe (backed up as
backup/event-token-lazy-resolution-pre-rewrite); the auth-layer changes
apply verbatim on the rebased branch.

- Add ClassifyRefreshFailure with structured HTTPStatusError so refresh
  failures split into transient (network, timeout, 408/429/5xx) and
  terminal (400/401/403) classes; unknown errors stay fatal.
- GetTokenSnapshot no longer marks a profile expired on transient
  refresh failures, so long-running sources can retry after backoff.
- postJSON returns HTTPStatusError keeping the response body out of the
  error string; the OAuth callback page HTML-escapes the sanitized
  exchange error instead of echoing raw server output.
- isInvalidGrantError also matches the preserved response body.

2026-07-20 18:09:15 +08:00

..

access_token_snapshot_test.go

fix(auth): unify access token resolution

2026-07-20 12:17:04 +08:00

agent_code_detect_test.go

fix(pat): keep agent code grants aligned (#536)

2026-07-01 10:16:59 +08:00

agent_code_detect.go

fix(pat): keep agent code grants aligned (#536)

2026-07-01 10:16:59 +08:00

app_config_path_test.go

fix(auth): partition app.json filename by edition to isolate credentials (#300)

2026-05-17 17:43:20 +08:00

app_config_strict_test.go

feat(event): add personal event subscriptions (#589)

2026-07-10 17:54:43 +08:00

app_config_strict.go

feat(event): add personal event subscriptions (#589)

2026-07-10 17:54:43 +08:00

app_config.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

app_token_test.go

feat: The token retrieval interface is now unified to one.

2026-04-27 15:11:12 +08:00

app_token.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

auth_extra_test.go

feat(auth): support exact multi-account profile identities

2026-07-17 00:56:43 +08:00

browser_unix_coverage_test.go

test: include coverage fixtures in native gates

2026-07-16 10:58:56 +08:00

browser_unix.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

browser_windows.go

init

2026-03-27 17:55:57 +08:00

browser.go

init

2026-03-27 17:55:57 +08:00

channel.go

Merge upstream main

2026-06-25 11:10:25 +08:00

classify_denial_reason_test.go

新增企业凭证hook&对应凭证登录检验未通过的报错处理 (#506)

2026-07-06 14:54:27 +08:00

cli_auth_check_test.go

feat(auth): support exact multi-account profile identities

2026-07-17 00:56:43 +08:00

coverage_edges_test.go

fix(auth): harden multi-account profile compatibility

2026-07-17 02:11:45 +08:00

credential_reset_test.go

fix: device flow defensively resets credentials before login (#155) (#157)

2026-04-24 14:11:16 +08:00

device_flow_status.go

feat: PAT scope error visualization and auto-retry with authorization polling (#113)

2026-04-19 19:12:34 +08:00

device_flow_test.go

fix: preserve PAT authorization uri and accept result poll envelope (#182)

2026-04-27 20:04:01 +08:00

device_flow.go

fix(auth): classify refresh failures and keep transient ones recoverable

2026-07-20 18:09:15 +08:00

edition_headers.go

新增企业凭证hook&对应凭证登录检验未通过的报错处理 (#506)

2026-07-06 14:54:27 +08:00

endpoints.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

filelock_test.go

ci: add CLI compatibility and PR quality gates (#602)

2026-07-15 14:53:34 +08:00

filelock_unix.go

init

2026-03-27 17:55:57 +08:00

filelock_windows.go

init

2026-03-27 17:55:57 +08:00

filelock.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

force_refresh.go

fix(auth): retry rejected access tokens safely

2026-07-20 13:37:18 +08:00

identity_agentid_test.go

fix(pat): keep agent code grants aligned (#536)

2026-07-01 10:16:59 +08:00

identity.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

keychain_migration.go

test: close remaining coverage gaps

2026-07-15 15:19:25 +08:00

keychain_store.go

fix(auth): harden multi-account profile compatibility

2026-07-17 02:11:45 +08:00

manager_test.go

init

2026-03-27 17:55:57 +08:00

manager.go

fix(auth): unify access token resolution

2026-07-20 12:17:04 +08:00

oauth_helpers.go

fix(auth): classify refresh failures and keep transient ones recoverable

2026-07-20 18:09:15 +08:00

oauth_provider_coverage_test.go

test(auth): isolate OAuth coverage fixtures

2026-07-20 07:29:24 +08:00

oauth_provider.go

fix(auth): classify refresh failures and keep transient ones recoverable

2026-07-20 18:09:15 +08:00

portable_store_test.go

feat(auth): support exact multi-account profile identities

2026-07-17 00:56:43 +08:00

portable_store.go

Merge remote-tracking branch 'origin/main' into codex/pr628-main-sync-20260716

2026-07-16 13:42:38 +08:00

profiles.go

fix(auth): address multi-account review feedback

2026-07-17 11:45:03 +08:00

refresh_failure_test.go

fix(auth): classify refresh failures and keep transient ones recoverable

2026-07-20 18:09:15 +08:00

refresh_failure.go

fix(auth): classify refresh failures and keep transient ones recoverable

2026-07-20 18:09:15 +08:00

rejected_token_refresh_test.go

fix(auth): retry rejected access tokens safely

2026-07-20 13:37:18 +08:00

remaining_coverage_test.go

fix(auth): harden multi-account profile compatibility

2026-07-17 02:11:45 +08:00

secret.go

test: expand unit coverage

2026-07-15 11:41:30 +08:00

secure_store_test.go

Merge origin/main into codex/test-coverage-100-v2

2026-07-16 10:25:38 +08:00

secure_store.go

Merge origin/main into codex/test-coverage-100-v2

2026-07-16 10:25:38 +08:00

testmain_test.go

test(auth): isolate Windows keychain packages

2026-07-20 14:33:17 +08:00

token_preflight_test.go

fix(auth): harden multi-account profile compatibility

2026-07-17 02:11:45 +08:00

token_test.go

fix(auth): address multi-account review feedback

2026-07-17 11:45:03 +08:00

token.go

fix(auth): retry rejected access tokens safely

2026-07-20 13:37:18 +08:00