d0e812e18f
refactor(chutes): remove accidental core OAuth shim ( #120993 )
...
* refactor(chutes): remove accidental core OAuth shim
* chore(plugin-sdk): refresh API baseline
* chore(plugin-sdk): refresh API baseline
* chore(plugin-sdk): refresh API baseline
* chore(plugin-sdk): refresh API baseline
* chore(plugin-sdk): refresh API baseline
2026-08-09 02:27:27 -07:00
7443882f45
refactor(chutes): move OAuth refresh into provider plugin ( #120840 )
...
* refactor(chutes): move OAuth refresh into provider plugin
* test(chutes): prove OAuth refresh load ordering
2026-08-08 21:50:25 -07:00
538263bafd
fix(chutes): cancel userinfo error response body before returning null ( #109677 )
2026-07-17 01:11:11 -07:00
8310c565e0
feat(onboarding): add provider sign-in ( #104502 )
...
* feat(onboarding): add provider sign-in flows
* fix(oauth): keep callback compatibility
* fix(onboarding): reconcile lost auth outcomes
* fix(onboarding): lock auth cancellation at commit
* fix(onboarding): close provider auth lifecycle gaps
* fix(onboarding): make terminal auth failures dismissable
* fix(onboarding): satisfy native app checks
* fix(onboarding): reconcile absent auth sessions
* fix(onboarding): bound provider auth sessions
* fix(onboarding): open provider auth links safely
* test(onboarding): use scanner-safe auth fixtures
* revert: keep established onboarding auth fixtures
* fix(onboarding): close provider auth cancellation gaps
* fix(gateway): retain uncollected wizard results
* fix(onboarding): bind provider reconciliation attempt
* fix(i18n): avoid guessing moved string identities
* style(onboarding): normalize remote auth choices efficiently
* fix(protocol): refresh optional provider auth choices
* test(gateway): cover provider auth dispatch order
* refactor(macos): split onboarding setup support
* fix(macos): refresh merged native checks
2026-07-11 13:00:17 -07:00
61893247ec
fix(chutes): redact OAuth error response body ( #103569 )
...
* fix(chutes): redact OAuth error response body in token exchange and refresh
Replace readResponseTextLimited + raw body in error message with
extractProviderErrorDetail for bounded, redacted structured error detail.
Ref: #102953
* fix(chutes): update test assertions for extractProviderErrorDetail message format
* fix(chutes): remove unused readResponseTextLimited and CHUTES_OAUTH_ERROR_BODY_LIMIT_BYTES
* fix(chutes): normalize OAuth HTTP failures
* test(chutes): assert redaction without fixed mask
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 18:40:58 +01:00
f35b6e52a7
fix(chutes): add timeouts to OAuth HTTP requests ( #102026 )
...
* fix(chutes): add timeouts to OAuth HTTP requests
* fixup: reuse OAuth request signal helper for Chutes
* fix(chutes): bound OAuth requests
* test(chutes): normalize abort rejections
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 10:28:58 +01:00
5723222bbb
fix(chutes-oauth-plugin): bound plugin JSON response reads
2026-06-28 21:33:20 -07:00
6fc0303ec0
fix(chutes): bound oauth token error bodies
2026-06-19 17:29:36 +02:00
4fa5092cdc
docs: document small extension sources
2026-06-04 21:02:07 -04:00
8c0aaee882
fix(chutes): validate oauth token lifetimes
2026-05-29 12:19:29 -04:00
Peter Steinberger