hermes - 💡(How to fix) Fix [Docs]: Auth checks should recognize Codex OAuth credentials, not only OPENAI_API_KEY [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
NousResearch/hermes-agent#17038Fetched 2026-04-29 06:37:40
View on GitHub
Comments
0
Participants
1
Timeline
4
Reactions
0
Participants
Timeline (top)
labeled ×4

Some docs/skills/auth-check guidance appears to assume OpenAI access is primarily represented by OPENAI_API_KEY. For Codex/OAuth-based setups, valid credentials may instead live in an auth file such as ~/.codex/auth.json.

This can cause false-negative setup checks or misleading troubleshooting advice: the user is logged in and the provider works, but the check says OpenAI credentials are missing because no OPENAI_API_KEY is present.

Root Cause

It avoids unnecessary downstream documentation patches and prevents users from being told their OpenAI credentials are missing when their Codex OAuth setup is actually valid.

Fix Action

Fix / Workaround

It avoids unnecessary downstream documentation patches and prevents users from being told their OpenAI credentials are missing when their Codex OAuth setup is actually valid.

RAW_BUFFERClick to expand / collapse

Summary

Some docs/skills/auth-check guidance appears to assume OpenAI access is primarily represented by OPENAI_API_KEY. For Codex/OAuth-based setups, valid credentials may instead live in an auth file such as ~/.codex/auth.json.

This can cause false-negative setup checks or misleading troubleshooting advice: the user is logged in and the provider works, but the check says OpenAI credentials are missing because no OPENAI_API_KEY is present.

Suggested improvement

Update auth-check documentation and any relevant setup diagnostics to distinguish between:

  • OpenAI API-key auth via environment/config
  • Codex OAuth auth via local auth file/session

For example, guidance could say to check the Codex OAuth auth file/session before reporting missing OpenAI credentials when the configured provider is Codex/OAuth-backed.

Expected behavior

If a deployment is configured to use Codex OAuth, auth diagnostics should verify the OAuth credential path/session rather than only looking for OPENAI_API_KEY.

Why this matters

It avoids unnecessary downstream documentation patches and prevents users from being told their OpenAI credentials are missing when their Codex OAuth setup is actually valid.

extent analysis

TL;DR

Update auth-check documentation to distinguish between OpenAI API-key auth and Codex OAuth auth via local auth file/session.

Guidance

  • Review the current auth-check documentation and setup diagnostics to identify areas where the assumption of OPENAI_API_KEY presence is made.
  • Update the documentation to include checks for Codex OAuth auth file/session, such as ~/.codex/auth.json, when the configured provider is Codex/OAuth-backed.
  • Verify that the updated diagnostics correctly identify valid Codex OAuth setups and do not report missing OpenAI credentials.
  • Consider adding clear guidance on the differences between OpenAI API-key auth and Codex OAuth auth to avoid user confusion.

Example

No code snippet is provided as it is not explicitly supported by the issue.

Notes

This solution assumes that the issue is primarily related to documentation and diagnostics, and that the underlying authentication mechanisms are functioning correctly.

Recommendation

Apply workaround: Update the auth-check documentation and setup diagnostics to correctly handle both OpenAI API-key auth and Codex OAuth auth, as this will provide a more accurate and helpful experience for users.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

FAQ

Expected behavior

If a deployment is configured to use Codex OAuth, auth diagnostics should verify the OAuth credential path/session rather than only looking for OPENAI_API_KEY.

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING