Skip to content

fix(auth): enforce remote manual auth state#187

Merged
steipete merged 10 commits intoopenclaw:mainfrom
salmonumbrella:fix/issue-181
Feb 9, 2026
Merged

fix(auth): enforce remote manual auth state#187
steipete merged 10 commits intoopenclaw:mainfrom
salmonumbrella:fix/issue-181

Conversation

@salmonumbrella
Copy link
Copy Markdown
Contributor

@salmonumbrella salmonumbrella commented Feb 4, 2026

Summary

  • Require state-carrying redirect URL for remote manual auth step 2 and enforce strict cached state validation
  • Add explicit errors for missing/mismatched remote manual state and update CLI messaging
  • Add tests for remote step 2 and strict state handling

Test Plan

  • go test ./internal/googleauth ./internal/cmd

Closes #181

@steipete steipete merged commit 2df8ece into openclaw:main Feb 9, 2026
4 checks passed
@steipete
Copy link
Copy Markdown
Collaborator

steipete commented Feb 9, 2026

Landed via squash onto main.

Thanks @salmonumbrella!

klodr pushed a commit to klodr/gogcli that referenced this pull request Apr 22, 2026
* fix(gmail): fallback to send-as list for display name

* refactor(gmail): remove dead code in primarySendAsDisplayNameFromList

The condition `primary == nil && sa.IsPrimary` inside the email-matching
block can never be true because `primary` is already unconditionally set
to `sa` when `sa.IsPrimary` is true earlier in the same loop iteration.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* test(gmail): add --from display name fallback to list test

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat(auth): persist manual oauth state

* feat(cli): add remote manual auth flow

* fix(auth): enforce remote manual auth state

* fix(auth): satisfy lint for manual auth flow

* fix(auth): harden remote manual auth state cache

* chore: update changelog for remote manual auth (openclaw#187) (thanks @salmonumbrella)

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve OAuth flow for remote server installations

2 participants