mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-11 13:41:53 +00:00
5ef0b8acb0
Replace the loopback/PKCE-callback server and manual-paste fallback with the RFC 8628 device-code flow as the only xAI Grok OAuth login path. The flow works in headless/SSH/container sessions with no 127.0.0.1 listener, shrinking the local attack surface. - Poll the token endpoint with server-provided interval, honoring slow_down and expires_in; store tokens with auth_mode oauth_device_code. - Adaptive proactive refresh skew for short-lived device-code JWTs; rotated tokens sync back to auth.json, the global root store, and the credential pool (no refresh-token replay). - Clear source suppression on successful re-login (CLI + dashboard) and drop the duplicate dashboard pool entry so exactly one seeded device_code entry exists. - Use the shared device_code source name for consistency with the nous/codex device-code providers. - Desktop: remove the loopback OAuth flow states and dead type variants; pkce providers' sign-in URL selection is unchanged. - Docs (EN + zh-Hans) rewritten for device-code login; drop the deleted --manual-paste flag from documented commands. |
||
|---|---|---|
| .. | ||
| assistant-ui | ||
| chat | ||
| onboarding | ||
| pane-shell | ||
| pet | ||
| ui | ||
| Backdrop.tsx | ||
| boot-failure-overlay.tsx | ||
| boot-failure-reauth.test.ts | ||
| boot-failure-reauth.ts | ||
| brand-mark.tsx | ||
| desktop-install-overlay.tsx | ||
| error-boundary.tsx | ||
| gateway-connecting-overlay.test.tsx | ||
| gateway-connecting-overlay.tsx | ||
| haptics-provider.tsx | ||
| language-switcher.test.tsx | ||
| language-switcher.tsx | ||
| model-picker.tsx | ||
| model-visibility-dialog.tsx | ||
| notifications.tsx | ||
| page-loader.tsx | ||
| prompt-overlays.tsx | ||
| remote-display-banner.tsx | ||
| session-picker.tsx | ||
| status-dot.tsx | ||