Skip to content

Make Notion OAuth values secret-safe#124

Open
misrasaurabh1 wants to merge 3 commits into
mainfrom
codex/oauth-public-secret-safe
Open

Make Notion OAuth values secret-safe#124
misrasaurabh1 wants to merge 3 commits into
mainfrom
codex/oauth-public-secret-safe

Conversation

@misrasaurabh1

@misrasaurabh1 misrasaurabh1 commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

Summary

  • preserve the existing public Notion OAuth JSON wire contract
  • redact OAuth codes, tokens, and client secrets from Debug output
  • collapse provider response bodies into bounded error classifications
  • impose a hard 30-second deadline on direct Notion OAuth exchanges
  • update the OAuth service PostCSS lock entry to clear the CI security audit
  • add exact compatibility, redaction, and timeout tests

This public-first compatibility change is consumed by the private hosted OAuth process. It does not change desktop/direct Notion projection or sync behavior.

Validation

  • cargo test -p locality-notion oauth (10 passed)
  • cargo fmt --all -- --check
  • OAuth service tests (27 passed) and npm audit (0 vulnerabilities)
  • GitHub Linux, macOS, FUSE, local E2E, OAuth, and review checks pass; Windows is still running

Private integration: codeflash-ai/locality-internal#8 (stacked on its admin foundation PR).

@vercel

vercel Bot commented Jul 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
locality Ready Ready Preview, Comment Jul 25, 2026 8:54pm

@github-actions

Copy link
Copy Markdown

Codex review

No high-confidence issues found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant