Skip to content

fix(auth): bind OAuth and SSO flows to browser - #826

Merged
yaojin3616 merged 3 commits into
mainfrom
agent/debugger/4f2d4ba7
Aug 10, 2026
Merged

fix(auth): bind OAuth and SSO flows to browser#826
yaojin3616 merged 3 commits into
mainfrom
agent/debugger/4f2d4ba7

Conversation

@yaojin3616

@yaojin3616 yaojin3616 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Fixes AND-153.

  • Generate and verify a browser-bound OAuth state cookie before code exchange.
  • Bind QR SSO token retrieval to the browser that created the scan session.
  • Add regression coverage for cross-browser state/session exchange attempts.

@yaojin3616
yaojin3616 merged commit e0f29a3 into main Aug 10, 2026
1 check was pending
@yaojin3616
yaojin3616 deleted the agent/debugger/4f2d4ba7 branch August 10, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@yaojin3616