openai / openai/codex

Remote Connection re-auth requires password for Sign in with Apple accounts with no social-login fallback

Open
#40,463 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

app auth bug remote
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of the Codex/ChatGPT App are you using?

Desktop client version observed in logs: 26.818.61809

What subscription do you have?

ChatGPT Pro

What platform are you using?
  • macOS desktop host
  • ChatGPT mobile app on iPhone for Remote Connection
What issue are you seeing?

The Remote Connection setup flow requires password re-authentication, but my ChatGPT account was originally created/used with Sign in with Apple.

When the Remote Connection flow opens auth.openai.com, it shows only a password verification page:

Please verify it's you
Enter the current password for your account

There is no "Continue with Apple" / social-login fallback on this verification page.

This creates a bad product path for social-login users:

  1. The account normally authenticates through Sign in with Apple.
  2. Remote Connection requires password verification.
  3. The verification page provides only a password field and no Apple/social-login option.
  4. A user who does not already have a ChatGPT password is effectively forced to create/set one in Account security settings to continue.

In my case, doing exactly that was followed immediately by a separate Desktop OAuth failure (refresh_token_invalidated) and an infinite login loop. That related auth issue is documented in #40267, including the reproduction and recovery details.

After fully signing out and restoring a clean web session using the account's original Sign in with Apple flow, Desktop became usable again. However, attempting Remote Connection again still returns to this password-only verification page, so I cannot safely complete the Remote Connection setup without re-entering the authentication path that triggered the earlier failure.

Steps to reproduce
  1. Use a ChatGPT account whose normal/original authentication method is Sign in with Apple.
  2. On macOS, open ChatGPT/Codex Desktop and start configuring Remote Connection for use from the ChatGPT mobile app.
  3. Continue until the identity re-verification step opens on auth.openai.com.
  4. Observe that the page asks for the account's current password.
  5. Observe that there is no Continue with Apple or other social-login re-authentication option.
Expected behavior

For an account authenticated through Sign in with Apple, Remote Connection re-authentication should support the account's existing authentication method.

At minimum, the verification page should provide one of these:

  • Continue with Apple / original identity-provider re-authentication, or
  • a clear explanation that a local ChatGPT password is required and why, without forcing users into an ambiguous password-reset/setup path.

Remote Connection onboarding should not require a social-login user to add/change their authentication method just to complete identity verification.

Actual behavior

Remote Connection presents a password-only verification page with no Apple/social-login fallback, blocking the setup for a social-login account unless the user creates/sets a ChatGPT password.

Related
  • #40267 — Desktop refresh-token invalidation/login loop observed immediately after setting a ChatGPT password while trying to satisfy this Remote Connection password requirement.

I can provide a screenshot of the password-only auth.openai.com verification screen if needed. Email/account identifiers are intentionally omitted from this report.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the Remote Connection setup on macOS with an account created through Sign in with Apple, then inspect the re-authentication entry point at auth.openai.com. Done means the flow offers the original identity-provider re-authentication or clearly explains the password requirement without blocking social-login users.

Written by the indexing model from the issue text.

Assessment

Tech stack
ios, macos
Domain
authentication
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.