openai/codex · error · WorkloadIdentitySessionError

{0}

Error message

{0}

What it means

Error "{0}" thrown in openai/codex.

Source

Thrown at codex-rs/login/src/auth/workload_identity.rs:119

#[derive(Clone, PartialEq, Eq)]
struct WorkloadIdentityFingerprint {
    assertion_file: PathBuf,
    environment: WorkloadIdentityEnvironment,
    federation_rule_id: String,
    token_url: String,
    workload_identity_context: Option<String>,
}

#[derive(Debug, Error)]
pub(super) enum WorkloadIdentitySessionError {
    #[error(transparent)]
    Exchange(#[from] WorkloadIdentityError),
    #[error("a different workload identity configuration is already active in this process")]
    ConflictingConfiguration,
    #[error("the workload identity process-session registry is unavailable")]
    RegistryUnavailable,
    #[error("{0}")]
    InvalidConfiguration(String),
}

/// Returns whether workload identity was selected through process configuration.
///
/// Either marker selects workload identity. Partial configuration then fails validation rather
/// than falling back to another credential source.
pub fn is_workload_identity_selected() -> bool {
    ProcessEnvironment::read().has_marker()
}

fn resolve_config(
    chatgpt_base_url: &str,
    environment: ProcessEnvironment,
    chatgpt_login_allowed: bool,
    auth_route_config: AuthRouteConfig,
) -> Result<Option<WorkloadIdentitySessionConfig>, WorkloadIdentitySessionError> {
    if !environment.has_marker() {

View on GitHub (pinned to 339751715c)

When it happens

Trigger: Thrown at codex-rs/login/src/auth/workload_identity.rs:119 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of openai/codex@339751715c (2026-08-25). Data as JSON: /api/errors/3b32b23913b0dfc8. Report an issue: GitHub.