Skip to content

fix(auth): enforce remote manual auth state#187

Open
salmonumbrella wants to merge 7 commits intosteipete:mainfrom
salmonumbrella:fix/issue-181
Open

fix(auth): enforce remote manual auth state#187
salmonumbrella wants to merge 7 commits intosteipete:mainfrom
salmonumbrella:fix/issue-181

Conversation

@salmonumbrella
Copy link
Contributor

@salmonumbrella salmonumbrella commented Feb 4, 2026

Summary

  • Require state-carrying redirect URL for remote manual auth step 2 and enforce strict cached state validation
  • Add explicit errors for missing/mismatched remote manual state and update CLI messaging
  • Add tests for remote step 2 and strict state handling

Test Plan

  • go test ./internal/googleauth ./internal/cmd

Closes #181

salmonumbrella and others added 7 commits February 4, 2026 11:08
The condition `primary == nil && sa.IsPrimary` inside the email-matching
block can never be true because `primary` is already unconditionally set
to `sa` when `sa.IsPrimary` is true earlier in the same loop iteration.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve OAuth flow for remote server installations

1 participant