 Gal Zahavi
|
ccee345155
|
fix(mcp): handle equivalent root resource URLs in OAuth validation (#20231)
|
2026-03-13 23:32:40 +00:00 |
|
|
christine betts
|
8300be1101
|
Move keychain fallback to keychain service (#22332)
|
2026-03-13 20:57:08 +00:00 |
|
|
Alisa
|
dbc4faf951
|
feat(a2a): enable native gRPC support and protocol routing (#21403)
Co-authored-by: Adam Weidman <adamfweidman@google.com>
|
2026-03-12 21:36:50 +00:00 |
|
|
Sandy Tao
|
9aa7de53cd
|
feat(core): add OAuth2 Authorization Code auth provider for A2A agents (#21496)
Co-authored-by: Adam Weidman <adamfweidman@google.com>
|
2026-03-10 15:24:44 +00:00 |
|
|
Alisa
|
f7a77c066d
|
feat(security): implement robust IP validation and safeFetch foundation (#21401)
|
2026-03-09 19:02:07 +00:00 |
|
|
Emily Hedlund
|
9e786829dc
|
feat(core): implement unified KeychainService and migrate token storage (#21344)
|
2026-03-06 18:56:08 +00:00 |
|
|
Sandy Tao
|
886aa9ce7b
|
refactor(core): extract shared OAuth flow primitives from MCPOAuthProvider (#20895)
|
2026-03-05 17:01:37 +00:00 |
|
|
nityam
|
9c0ff50664
|
fix: merge duplicate imports in packages/core (3/4) (#20928)
|
2026-03-04 00:12:59 +00:00 |
|
|
Nayana Parameswarappa
|
3a86a84705
|
Adding MCPOAuthProvider implementing the MCPSDK OAuthClientProvider (#20121)
|
2026-03-02 21:37:44 +00:00 |
|
|
nityam
|
54085e0a00
|
Fix: Handle corrupted token file gracefully when switching auth types (#19845) (#19850)
|
2026-02-23 23:15:54 +00:00 |
|
|
Christian Gunderman
|
981e9a978e
|
Disallow and suppress unsafe assignment (#19736)
|
2026-02-20 22:28:55 +00:00 |
|
|
Emily Hedlund
|
2cd726a7c2
|
fix(core): restore auth consent in headless mode and add unit tests (#19689)
|
2026-02-20 20:31:43 +00:00 |
|
|
Adam Weidman
|
c10c25b4eb
|
chore(core): improve encapsulation and remove unused exports (#19556)
|
2026-02-19 20:19:32 +00:00 |
|
|
garrettsparks
|
b37a7ed3f4
|
use issuer instead of authorization_endpoint for oauth discovery (#17332)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
|
2026-02-18 22:38:04 +00:00 |
|
|
Abhi
|
00e91cfb5e
|
feat(telemetry): add keychain availability and token storage metrics (#18971)
|
2026-02-17 15:11:38 +00:00 |
|
|
Christian Gunderman
|
c369147b32
|
Disallow unsafe type assertions (#18688)
|
2026-02-10 00:10:15 +00:00 |
|
|
Emily Hedlund
|
b96b093f4c
|
feat(core): require user consent before MCP server OAuth (#18132)
|
2026-02-03 21:26:00 +00:00 |
|
|
Vijay Vasudevan
|
efca9a98ee
|
fix(core): use RFC 9728 compliant path-based OAuth protected resource discovery (#15756)
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com>
|
2026-01-23 18:55:23 +00:00 |
|
|
Adib234
|
ba3a37862b
|
Refactor: Migrate CLI appEvents to Core coreEvents (#15737)
|
2026-01-23 16:45:46 +00:00 |
|
|
Jerop Kipruto
|
309ce0ccea
|
fix(core): Include MCP server name in OAuth message (#17351)
|
2026-01-23 02:48:15 +00:00 |
|
|
Sehoon Shon
|
544b47f72e
|
fix(core): resolve PKCE length issue and stabilize OAuth redirect port (#16815)
|
2026-01-17 17:18:40 +00:00 |
|
|
N. Taylor Mullen
|
1bfc3a7399
|
Introduce GEMINI_CLI_HOME for strict test isolation (#15907)
|
2026-01-07 04:09:39 +00:00 |
|
|
Adib234
|
97bc542183
|
Migrate console to coreEvents.emitFeedback or debugLogger (#15219)
|
2025-12-29 20:46:10 +00:00 |
|
|
Gal Zahavi
|
324e4fb6ef
|
Validate OAuth resource parameter matches MCP server URL (#15289)
|
2025-12-19 19:33:20 +00:00 |
|
|
Christian Gunderman
|
bce7cd8bb3
|
Disallow redundant typecasts. (#15030)
|
2025-12-13 01:43:43 +00:00 |
|
|
CHAEWAN KIM
|
c7c043fb6d
|
fix(async): prevent missed async errors from bypassing catch handlers (#13714)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
|
2025-12-01 22:11:40 +00:00 |
|
|
sai-sunder-s
|
6b3349c14a
|
feat(mcp): Inject GoogleCredentialProvider headers in McpClient (#13783)
|
2025-11-26 20:08:19 +00:00 |
|
|
Jacob Richman
|
9409be8e1b
|
Protect stdout and stderr so JavaScript code can't accidentally write to stdout corrupting ink rendering (#13247)
Bypassing rules as link checker failure is spurious.
|
2025-11-20 10:44:02 -08:00 |
|
|
Megha Bansal
|
b21cb4a57d
|
Increase code coverage for core packages (#12872)
|
2025-11-12 04:06:43 +00:00 |
|
|
Chris Coutinho
|
b21133f6c1
|
fix(mcp): replace hardcoded port 7777 with dynamic port allocation for OAuth (#12520)
|
2025-11-04 07:16:56 +00:00 |
|
|
Gal Zahavi
|
3c771da494
|
fix(auth): Return empty map if token file does not exits, and refacto… (#12332)
Co-authored-by: Sandy Tao <sandytao520@icloud.com>
|
2025-11-03 23:07:22 +00:00 |
|
|
Chris Coutinho
|
65b28f5dce
|
fix: preserve path components in OAuth issuer URLs (#12448)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Gregory Shikhman <cornmander@cornmander.com>
|
2025-11-02 21:19:46 +00:00 |
|
|
Sehoon Shon
|
008e1f4645
|
migrate console.error to coreEvents for mcp-client-manager and google-auth-provider (#12342)
|
2025-10-31 18:52:56 +00:00 |
|
|
Sehoon Shon
|
8960baebc1
|
migrating console.error to debugger for installationManager, oauth-provider, modifiable-tool (#12279)
|
2025-10-31 18:17:51 +00:00 |
|
|
matt korwel
|
9c39d616cb
|
feat: Prevent self-imports and fix build loop (#12309)
|
2025-10-30 20:15:49 +00:00 |
|
|
christine betts
|
d2e8d8afbb
|
Add support for sensitive keychain-stored per-extension settings (#11953)
|
2025-10-28 18:48:50 +00:00 |
|
|
Adam Weidman
|
0aa64ccd16
|
chore(console): change console errors in sa-impersontation (#12165)
|
2025-10-28 15:26:39 +00:00 |
|
|
Adam Weidman
|
1060704bd8
|
Revert "feat(ID token support): Add ID token support for authenticating to MC…" (#12162)
|
2025-10-28 15:07:57 +00:00 |
|
|
Ruchika Goel
|
ba4fc0a4b4
|
feat(ID token support): Add ID token support for authenticating to MC… (#12031)
Co-authored-by: Adam Weidman <adamfweidman@google.com>
|
2025-10-27 20:34:38 +00:00 |
|
|
Jack Wotherspoon
|
ce28fe4b06
|
fix: user configured oauth scopes should take precedence over discovered scopes (#12088)
|
2025-10-27 16:57:12 +00:00 |
|
|
shishu314
|
24b2c411c9
|
fix(security) - Use emitFeedback instead of console error (#11948)
Co-authored-by: gemini-cli-robot <gemini-cli-robot@google.com>
|
2025-10-24 18:07:11 +00:00 |
|
|
shishu314
|
947aba044c
|
fix(security) - Use emitFeedback (#11961)
Co-authored-by: gemini-cli-robot <gemini-cli-robot@google.com>
|
2025-10-24 17:52:07 +00:00 |
|
|
Adam Weidman
|
019ce9ee0d
|
chore(core): add token caching in google auth provider (#11946)
|
2025-10-24 14:26:42 +00:00 |
|
|
Riddhi Dutta
|
de468528dd
|
Added parameterization to base-storage-token.test and prompts.test.ts (#11821)
|
2025-10-23 21:47:06 +00:00 |
|
|
Mayur Vaid
|
523a4ea9ea
|
fix(mcp): Include path in oauth resource parameter (#11654)
|
2025-10-22 15:48:47 +00:00 |
|
|
Abhi
|
a2fc45a492
|
refactor(logging): Centralize console logging with debugLogger (#11590)
|
2025-10-21 20:35:22 +00:00 |
|
|
Dongin Kim(Terry)
|
1470bae0d0
|
chore: Extract '.gemini' to GEMINI_DIR constant (#10540)
Co-authored-by: Richie Foreman <richie.foreman@gmail.com>
|
2025-10-13 17:31:39 +00:00 |
|
|
Adam Weidman
|
e43d6e2a17
|
feat(iap support): Add service account impersonation provider to MCPServers to support IAP on Cloud Run (#8505)
Co-authored-by: Bryan Morgan <bryanmorgan@google.com>
|
2025-09-27 08:12:24 +00:00 |
|
|
jleong-stripe
|
33022d55c9
|
For dynamic client registration - use registration endpoint in config if available instead of performing OAuth discovery again (#9231)
|
2025-09-24 20:53:42 +00:00 |
|
|
Sarah Price
|
6a5c995fd8
|
fix(mcp): Display OAuth authentication messages in CLI UI instead of debug console (#6919)
Co-authored-by: Yoichiro Tanaka <yoichiro6642@gmail.com>
Co-authored-by: Jacob Richman <jacob314@gmail.com>
|
2025-09-17 22:25:33 +00:00 |
|