openai / openai/codex

Windows app Codex fails when CLI refresh token is revoked

Open
#46,438 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

app auth bug windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of the Codex App are you using (From “About Codex” dialog)?

26.908.70816

What subscription do you have?

Max

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

You get the error:
Your access token could not be refreshed because your refresh token was revoked. Please log out and sign in again.

Logging out and back into the windows app does not clear it.

What steps can reproduce the bug?

In the windows app I get the error:
Your access token could not be refreshed because your refresh token was revoked. Please log out and sign in again.

So I log out of the Windows App and log back in. I continue to get the error:
Error running remote compact task: Your access token could not be refreshed because your refresh token was revoked. Please log out and sign in again.

I do this again and still get the error.

I ended up going to the codex cli. Logging out and back in. This cleared the error.

What is the expected behavior?

Either solution would be acceptable:

  1. Logging in and out of the windows app resets the codex OAuth.
  2. Your access token could not be refreshed because your refresh token was revoked in the codex cli. Please log out of the cli and sign in again.
Additional information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Windows app logout/login flow and the Codex CLI OAuth sign-in flow described in the report, then reproduce the revoked-refresh-token error in both contexts. Trace how each entry point clears or reuses credentials. Done means logging in again from the Windows app clears the error, or the app clearly directs users to reauthenticate through the CLI.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
authentication, cli, desktop
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.