Skip to content

Auth cleanup #1514

Closed
Closed

Description

@BobDickinson

Remove guided auth mode from Inspector core

Migrate web client auth store to use /store API implementation instead of browser store (to interoperate with CLI/TUI which use the file based auth store).

Investigate whether auth store elements (like tokens) should be managed via secret storage mechanism (keychain) and if so, implement that (not sure if that replaces or augments the auth store).

Remove Zustand file store wrappers (code) and add logic to automatically convert to plain JSON on read for backward compatibility (Zustand vanilla storage isn't adding anything except complexity, esp given that we aren't using any Zustand state management above it).

Activity

  1. added
    authIssues and PRs related to authorization
    v2Issues and PRs for v2
    on Jun 24, 2026
  2. self-assigned this
    on Jun 24, 2026
  3. cliffhall commented on Jun 29, 2026

    @cliffhall
    Member

    Done via #1531 (Guided-auth removal, OAuth smoke testing, and TUI/CLI support), merged to v2/main.

    Delivered here:

    • Guided OAuth removed (single authenticate() / completeOAuthFlow() path).
    • Connect-time OAuth, install-level CIMD, per-server OAuth clear, TUI/CLI runners.
    • Keychain rehydration of oauth.clientSecret in loadServerEntries() for TUI/CLI.

    Remaining sub-tasks split into their own tracked issues so they aren't lost:

    Closed as Done — the guided-auth cleanup is complete; the store-migration follow-ups continue under the issues above.

  4. added this to the v2.0.0 milestone on Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

authIssues and PRs related to authorizationkeyringRelated to system keychain accessv2Issues and PRs for v2

Type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions