惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Y
Y Combinator Blog
IT之家
IT之家
博客园_首页
量子位
博客园 - 三生石上(FineUI控件)
小众软件
小众软件
博客园 - 聂微东
罗磊的独立博客
酷 壳 – CoolShell
酷 壳 – CoolShell
Hugging Face - Blog
Hugging Face - Blog
V
V2EX
爱范儿
爱范儿
大猫的无限游戏
大猫的无限游戏
宝玉的分享
宝玉的分享
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
雷峰网
雷峰网
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Google DeepMind News
Google DeepMind News
Microsoft Azure Blog
Microsoft Azure Blog
有赞技术团队
有赞技术团队
S
SegmentFault 最新的问题
Engineering at Meta
Engineering at Meta
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
fix(xai): rediscover retired OAuth token endpoint (#96146...
Jaaneek · 2026-06-25 · via Recent Commits to openclaw:main
Original file line numberDiff line numberDiff line change

@@ -211,6 +211,67 @@ describe("xAI OAuth", () => {

211211

expect(refreshed.expires).toBe(121_000);

212212

});

213213
214+

it("rediscovers the current token endpoint for stale xAI OAuth credentials", async () => {

215+

const fetchImpl = vi.fn<typeof fetch>(async (url, init) => {

216+

if (requestUrl(url) === XAI_OAUTH_DISCOVERY_URL) {

217+

expect(init?.method).toBeUndefined();

218+

return jsonResponse({

219+

authorization_endpoint: "https://auth.x.ai/oauth2/authorize",

220+

token_endpoint: "https://auth.x.ai/oauth2/token",

221+

});

222+

}

223+

expect(requestUrl(url)).toBe("https://auth.x.ai/oauth2/token");

224+

expect(init?.method).toBe("POST");

225+

expect(requireStringBody(init)).toContain("refresh_token=refresh-1");

226+

return jsonResponse({

227+

access_token: "access-2",

228+

refresh_token: "refresh-2",

229+

expires_in: 120,

230+

});

231+

});

232+

const credential = {

233+

type: "oauth",

234+

provider: "xai",

235+

access: "access-1",

236+

refresh: "refresh-1",

237+

expires: 100,

238+

tokenEndpoint: "https://auth.x.ai/oauth/token",

239+

} satisfies OAuthCredential & { tokenEndpoint: string };

240+
241+

const refreshed = await refreshXaiOAuthCredential(credential, { fetchImpl, now: () => 1_000 });

242+
243+

expect(fetchImpl).toHaveBeenCalledTimes(2);

244+

expect(fetchImpl.mock.calls.map(([url]) => requestUrl(url))).toEqual([

245+

XAI_OAUTH_DISCOVERY_URL,

246+

"https://auth.x.ai/oauth2/token",

247+

]);

248+

expect(refreshed).toMatchObject({

249+

access: "access-2",

250+

refresh: "refresh-2",

251+

tokenEndpoint: "https://auth.x.ai/oauth2/token",

252+

});

253+

});

254+
255+

it("does not reuse the stale xAI OAuth token endpoint when discovery fails", async () => {

256+

const fetchImpl = vi.fn<typeof fetch>(async (url) => {

257+

expect(requestUrl(url)).toBe(XAI_OAUTH_DISCOVERY_URL);

258+

throw new Error("discovery unavailable");

259+

});

260+

const credential = {

261+

type: "oauth",

262+

provider: "xai",

263+

access: "access-1",

264+

refresh: "refresh-1",

265+

expires: 100,

266+

tokenEndpoint: "https://auth.x.ai/oauth/token",

267+

} satisfies OAuthCredential & { tokenEndpoint: string };

268+
269+

await expect(refreshXaiOAuthCredential(credential, { fetchImpl })).rejects.toThrow(

270+

"discovery unavailable",

271+

);

272+

expect(fetchImpl).toHaveBeenCalledTimes(1);

273+

});

274+
214275

it("does not coerce partial xAI expires_in values", async () => {

215276

const fetchImpl = vi.fn<typeof fetch>(async () =>

216277

jsonResponse({