Commit Graph

59 Commits

Author SHA1 Message Date
Emily Hedlund 2cd726a7c2 fix(core): restore auth consent in headless mode and add unit tests (#19689) 2026-02-20 20:31:43 +00:00
Adam Weidman c10c25b4eb chore(core): improve encapsulation and remove unused exports (#19556) 2026-02-19 20:19:32 +00:00
garrettsparks b37a7ed3f4 use issuer instead of authorization_endpoint for oauth discovery (#17332)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
2026-02-18 22:38:04 +00:00
Abhi 00e91cfb5e feat(telemetry): add keychain availability and token storage metrics (#18971) 2026-02-17 15:11:38 +00:00
Christian Gunderman c369147b32 Disallow unsafe type assertions (#18688) 2026-02-10 00:10:15 +00:00
Emily Hedlund b96b093f4c feat(core): require user consent before MCP server OAuth (#18132) 2026-02-03 21:26:00 +00:00
Vijay Vasudevan efca9a98ee fix(core): use RFC 9728 compliant path-based OAuth protected resource discovery (#15756)
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com>
2026-01-23 18:55:23 +00:00
Adib234 ba3a37862b Refactor: Migrate CLI appEvents to Core coreEvents (#15737) 2026-01-23 16:45:46 +00:00
Jerop Kipruto 309ce0ccea fix(core): Include MCP server name in OAuth message (#17351) 2026-01-23 02:48:15 +00:00
Sehoon Shon 544b47f72e fix(core): resolve PKCE length issue and stabilize OAuth redirect port (#16815) 2026-01-17 17:18:40 +00:00
N. Taylor Mullen 1bfc3a7399 Introduce GEMINI_CLI_HOME for strict test isolation (#15907) 2026-01-07 04:09:39 +00:00
Adib234 97bc542183 Migrate console to coreEvents.emitFeedback or debugLogger (#15219) 2025-12-29 20:46:10 +00:00
Gal Zahavi 324e4fb6ef Validate OAuth resource parameter matches MCP server URL (#15289) 2025-12-19 19:33:20 +00:00
Christian Gunderman bce7cd8bb3 Disallow redundant typecasts. (#15030) 2025-12-13 01:43:43 +00:00
CHAEWAN KIM c7c043fb6d fix(async): prevent missed async errors from bypassing catch handlers (#13714)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
2025-12-01 22:11:40 +00:00
sai-sunder-s 6b3349c14a feat(mcp): Inject GoogleCredentialProvider headers in McpClient (#13783) 2025-11-26 20:08:19 +00:00
Jacob Richman 9409be8e1b Protect stdout and stderr so JavaScript code can't accidentally write to stdout corrupting ink rendering (#13247)
Bypassing rules as link checker failure is spurious.
2025-11-20 10:44:02 -08:00
Megha Bansal b21cb4a57d Increase code coverage for core packages (#12872) 2025-11-12 04:06:43 +00:00
Chris Coutinho b21133f6c1 fix(mcp): replace hardcoded port 7777 with dynamic port allocation for OAuth (#12520) 2025-11-04 07:16:56 +00:00
Gal Zahavi 3c771da494 fix(auth): Return empty map if token file does not exits, and refacto… (#12332)
Co-authored-by: Sandy Tao <sandytao520@icloud.com>
2025-11-03 23:07:22 +00:00
Chris Coutinho 65b28f5dce fix: preserve path components in OAuth issuer URLs (#12448)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Gregory Shikhman <cornmander@cornmander.com>
2025-11-02 21:19:46 +00:00
Sehoon Shon 008e1f4645 migrate console.error to coreEvents for mcp-client-manager and google-auth-provider (#12342) 2025-10-31 18:52:56 +00:00
Sehoon Shon 8960baebc1 migrating console.error to debugger for installationManager, oauth-provider, modifiable-tool (#12279) 2025-10-31 18:17:51 +00:00
matt korwel 9c39d616cb feat: Prevent self-imports and fix build loop (#12309) 2025-10-30 20:15:49 +00:00
christine betts d2e8d8afbb Add support for sensitive keychain-stored per-extension settings (#11953) 2025-10-28 18:48:50 +00:00
Adam Weidman 0aa64ccd16 chore(console): change console errors in sa-impersontation (#12165) 2025-10-28 15:26:39 +00:00
Adam Weidman 1060704bd8 Revert "feat(ID token support): Add ID token support for authenticating to MC…" (#12162) 2025-10-28 15:07:57 +00:00
Ruchika Goel ba4fc0a4b4 feat(ID token support): Add ID token support for authenticating to MC… (#12031)
Co-authored-by: Adam Weidman <adamfweidman@google.com>
2025-10-27 20:34:38 +00:00
Jack Wotherspoon ce28fe4b06 fix: user configured oauth scopes should take precedence over discovered scopes (#12088) 2025-10-27 16:57:12 +00:00
shishu314 24b2c411c9 fix(security) - Use emitFeedback instead of console error (#11948)
Co-authored-by: gemini-cli-robot <gemini-cli-robot@google.com>
2025-10-24 18:07:11 +00:00
shishu314 947aba044c fix(security) - Use emitFeedback (#11961)
Co-authored-by: gemini-cli-robot <gemini-cli-robot@google.com>
2025-10-24 17:52:07 +00:00
Adam Weidman 019ce9ee0d chore(core): add token caching in google auth provider (#11946) 2025-10-24 14:26:42 +00:00
Riddhi Dutta de468528dd Added parameterization to base-storage-token.test and prompts.test.ts (#11821) 2025-10-23 21:47:06 +00:00
Mayur Vaid 523a4ea9ea fix(mcp): Include path in oauth resource parameter (#11654) 2025-10-22 15:48:47 +00:00
Abhi a2fc45a492 refactor(logging): Centralize console logging with debugLogger (#11590) 2025-10-21 20:35:22 +00:00
Dongin Kim(Terry) 1470bae0d0 chore: Extract '.gemini' to GEMINI_DIR constant (#10540)
Co-authored-by: Richie Foreman <richie.foreman@gmail.com>
2025-10-13 17:31:39 +00:00
Adam Weidman e43d6e2a17 feat(iap support): Add service account impersonation provider to MCPServers to support IAP on Cloud Run (#8505)
Co-authored-by: Bryan Morgan <bryanmorgan@google.com>
2025-09-27 08:12:24 +00:00
jleong-stripe 33022d55c9 For dynamic client registration - use registration endpoint in config if available instead of performing OAuth discovery again (#9231) 2025-09-24 20:53:42 +00:00
Sarah Price 6a5c995fd8 fix(mcp): Display OAuth authentication messages in CLI UI instead of debug console (#6919)
Co-authored-by: Yoichiro Tanaka <yoichiro6642@gmail.com>
Co-authored-by: Jacob Richman <jacob314@gmail.com>
2025-09-17 22:25:33 +00:00
shishu314 2cc9b607f2 feat(security) - Use hybrid token storage when flag is enabled (#8010)
Co-authored-by: Shi Shu <shii@google.com>
2025-09-15 18:05:17 +00:00
shishu314 751533d059 feat(security) - Make oauth token storage implement the shared interface (#7802)
Co-authored-by: Shi Shu <shii@google.com>
2025-09-05 16:08:50 +00:00
shishu314 e7e10ef2f5 Feat(security) - Make the OAuthTokenStorage non static (#7716)
Co-authored-by: Shi Shu <shii@google.com>
2025-09-04 20:42:47 +00:00
shishu314 5fba599882 feat(oauth) - Create hybrid storage class (#7610)
Co-authored-by: Shi Shu <shii@google.com>
2025-09-02 23:13:07 +00:00
shishu314 2770190cde feat(cli) - Create base class for handling tokens stored in files (#7240)
Co-authored-by: Shi Shu <shii@google.com>
2025-08-28 13:54:12 +00:00
shishu314 69e739bece feat(cli) - Define base class for token storage (#7221)
Co-authored-by: Shi Shu <shii@google.com>
2025-08-27 17:49:20 +00:00
shishu314 0575b3cc3c feat(cli) - Define shared interface for storage (#7049)
Co-authored-by: Shi Shu <shii@google.com>
2025-08-26 21:03:11 +00:00
Amy He c9c905be1e feat(mcp): Add ODIC fallback to OAuth metadata look up (#6863)
Co-authored-by: cornmander <shikhman@google.com>
2025-08-26 16:06:26 +00:00
Pascal Birchler a97a6cc71b Explict imports & exports with type modifier (#3774) 2025-08-25 22:04:53 +00:00
Yuki Okita fbbf39b059 Refac: Centralize storage file management (#4078)
Co-authored-by: Taylor Mullen <ntaylormullen@google.com>
2025-08-20 01:55:47 +00:00
Brian Ray ef24847135 fixes for oauth spec - adds github oauth support. Resource paramater. (#6281) 2025-08-15 19:14:48 +00:00