{"record":{"id":"ea99e318db8ecc52","repo":"openai/codex","slug":"websocket-auth-clock-skew-must-fit-in-a-signed-64","errorCode":null,"errorMessage":"websocket auth clock skew must fit in a signed 64-bit integer","messagePattern":"websocket auth clock skew must fit in a signed 64-bit integer","errorType":"validation","errorClass":"std::io::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/app-server-transport/src/transport/auth.rs","lineNumber":248,"sourceCode":"                    token_sha256: sha256_digest(token.as_bytes()),\n                })\n            }\n            AppServerWebsocketCapabilityTokenSource::TokenSha256 { token_sha256 } => {\n                Some(WebsocketAuthMode::CapabilityToken {\n                    token_sha256: *token_sha256,\n                })\n            }\n        },\n        Some(AppServerWebsocketAuthConfig::SignedBearerToken {\n            shared_secret_file,\n            issuer,\n            audience,\n            max_clock_skew_seconds,\n        }) => {\n            let shared_secret = read_trimmed_secret(shared_secret_file.as_ref())?.into_bytes();\n            validate_signed_bearer_secret(shared_secret_file.as_ref(), &shared_secret)?;\n            let max_clock_skew_seconds = i64::try_from(*max_clock_skew_seconds).map_err(|_| {\n                io::Error::new(\n                    ErrorKind::InvalidInput,\n                    \"websocket auth clock skew must fit in a signed 64-bit integer\",\n                )\n            })?;\n            Some(WebsocketAuthMode::SignedBearerToken {\n                shared_secret,\n                issuer: issuer.clone(),\n                audience: audience.clone(),\n                max_clock_skew_seconds,\n            })\n        }\n        None => None,\n    };\n\n    Ok(WebsocketAuthPolicy { mode })\n}\n\npub(crate) fn is_unauthenticated_non_loopback_listener(","sourceCodeStart":230,"sourceCodeEnd":266,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/app-server-transport/src/transport/auth.rs#L230-L266","documentation":"Error \"websocket auth clock skew must fit in a signed 64-bit integer\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/app-server-transport/src/transport/auth.rs:248 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}