Repository navigation

feat: automatically rotate SDK API tokens - #445

Merged

timmarkhuff merged 34 commits into

mainfrom

thuff/gl-1709-token-auto-refresh-independent

Jul 29, 2026

Merged

feat: automatically rotate SDK API tokens#445
timmarkhuff merged 34 commits into
mainfrom
thuff/gl-1709-token-auto-refresh-independent

Commits on Jul 9, 2026
- Add automatic API token refresh
  
  Tim Huff
  and
  cursoragent
  committed
  ed7f266
- Exclude client lifecycle from CLI commands
  
  Tim Huff
  and
  cursoragent
  committed
  ee0b1f3
- Harden token refresh failure handling
  
  Tim Huff
  and
  cursoragent
  committed
  e5a575d
- Keep clients usable before token API rollout
  
  Tim Huff
  and
  cursoragent
  committed
  7c26f28
- Close remaining token refresh retry gaps
  Tim Huff
  committed
  b41c4ae
- Revoke bootstrap token after initial working token is minted
  
  Tim Huff
  and
  cursoragent
  committed
  c2be003
- Automatically reformatting code
  Auto-format Bot
  committed
  0be7837
- Store base_name in slot cache to eliminate repeated token lookups during rotation
  
  Tim Huff
  and
  cursoragent
  committed
  147ce68
Commits on Jul 10, 2026
- Switch to by-snippet endpoint and revert temporary TTL values
  
  Tim Huff
  and
  cursoragent
  committed
  1738546
Commits on Jul 13, 2026
- adding testing values
  Tim Huff
  committed
  73a9c47
Commits on Jul 23, 2026
- Park bootstrap token as previous instead of revoking immediately
  
  Tim Huff
  and
  cursoragent
  committed
  9f01505
- Fix CI: nullable last_used_at and TokenManager mypy typing
  
  Tim Huff
  and
  cursoragent
  committed
  dcdcf3a
- Stop token refresh during HTTP retry tests
  
  Tim Huff
  and
  cursoragent
  committed
  59782e0
- Disable token refresh during the test suite
  
  Tim Huff
  and
  cursoragent
  committed
  0bc4b13
- Simplify token rotation to use-or-rotate under the lock
  
  Tim Huff
  and
  cursoragent
  committed
  b00991d
- Automatically reformatting code
  Auto-format Bot
  committed
  2218fb6
- Remove local token rotation watch script from the PR
  
  Tim Huff
  and
  cursoragent
  committed
  803b3b6
- Surface 401 response bodies in token init and recovery
  
  Tim Huff
  and
  cursoragent
  committed
  d5b9f67
Commits on Jul 24, 2026
- Discover rotation from token expires_at instead of hardcoded TTLs
  
  Tim Huff
  and
  cursoragent
  committed
  6dbd1be
- Automatically reformatting code
  Auto-format Bot
  committed
  e5862dd
- Harden token rotation and remove the refresh env knob
  
  Tim Huff
  and
  cursoragent
  committed
  eaa7048
- Automatically reformatting code
  Auto-format Bot
  committed
  cb7b81b
- Merge origin/main into token auto-refresh branch.
  
  Tim Huff
  and
  cursoragent
  committed
  413b320
- Merge remote autoformat commit into local main merge.
  Tim Huff
  committed
  3a556ce
- Tidy token-refresh comments and restore config import style
  
  Tim Huff
  and
  cursoragent
  committed
  eaf4622
- Fix mypy errors in multipart retry helpers and token tests
  
  Tim Huff
  and
  cursoragent
  committed
  c2c8815
- Revert unnecessary Edge auth recovery wiring
  
  Tim Huff
  and
  cursoragent
  committed
  9d975b9
- Remove mid-request 401 token recovery
  
  Tim Huff
  and
  cursoragent
  committed
  908621b
- Drop unnecessary Groundlight.__repr__ docstring
  
  Tim Huff
  and
  cursoragent
  committed
  cb64ca2
- Fix ask_vlm_verify fixture for TokenManager init
  
  Tim Huff
  and
  cursoragent
  committed
  277c59b
- Automatically reformatting code
  Auto-format Bot
  committed
  d2eb82f
- bumping version
  Tim Huff
  committed
  42f465a
- Merge remote-tracking branch tip before pushing version bump.
  Tim Huff
  committed
  1c28ed2
- Use identity token_ttl for rotate-vs-not and refresh cadence
  
  Tim Huff
  and
  cursoragent
  committed
  b5f314b

Commits

Commits on Jul 9, 2026

Commits on Jul 10, 2026

Commits on Jul 13, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026