openai / openai/codex

ChatGPT desktop Codex sign-in loop after successful authentication

Open
#40,842 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

app auth bug
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

Title: ChatGPT desktop Codex sign-in loop after successful authentication

After signing in with ChatGPT, Codex in the macOS desktop app briefly recognizes my account, then immediately returns to the sign-in screen. The bundled Codex CLI remains authenticated and successfully completes prompts.

Environment:

  • macOS 26.3.1 (25D2128)
  • ChatGPT desktop 26.820.60940 (build 7119), bundle com.openai.codex
  • Bundled CLI 0.150.0-alpha.8
  • MonoProxy: HTTP 127.0.0.1:8118, SOCKS5 127.0.0.1:8119

Reproduction:

  1. Sign in using ChatGPT/device authorization.
  2. CLI login status reports “Logged in using ChatGPT”; an authenticated prompt returns AUTH_OK.
  3. Launch ChatGPT with proxy variables inherited.
  4. Open Codex; it returns to the sign-in page.

Key log sequence:

  • account lookup succeeds: authenticatedAccountPresent=true
  • GET /backend-api/accounts/:param/settings uses cached token but returns 401
  • error: “Missing valid access token or actor biscuit”
  • auth status then changes to hasToken=false, nullReason=auth_token_missing, refreshToken=true
  • account lookup fails with account_info_token_unavailable
  • subsequent /wham requests return 401 without an attached token

I reinstalled the official signed app, reset its preferences/caches/containers, logged out/in again, and tested system/global proxy plus explicit proxy variables. The CLI and WebSocket connection now work, but the desktop 401/login loop remains.

Please investigate whether the desktop client or backend is losing the actor biscuit or account/workspace binding. No tokens, auth.json, device codes, or account IDs are included.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the loop in the macOS desktop Codex flow and inspect the reported authentication sequence around the account settings and /wham requests. Trace where the cached token, actor biscuit, or account binding becomes unavailable; done means the desktop client remains signed in and authenticated prompts work without changing the already-working CLI behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos, rust
Domain
authentication, desktop
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.