ciregenz 178a6060eb gmail: route OAuth refresh through cloud rotation-pool proxy ...

google-workspace-mcp's gauth.py hardcodes token_uri to oauth2.googleapis.com
and uses local CLIENT_ID/SECRET on every refresh. OAuth runs through a
rotation pool on the cloud side, so the refresh_token is bound to the
pool slot that minted it, not the single client baked into the DMG, and
direct refreshes return unauthorized_client. Redirect spawn through a
shim that monkey-patches get_credentials to point token_uri at a local
proxy (/api/tools/google-oauth-token), which forwards the refresh to
api.openswarm.com/api/oauth/google/refresh (pool-aware). Unblocks every
Gmail/Drive/Calendar query for users on the cloud OAuth pool.

2026-05-20 01:58:59 -07:00

..

__init__.py

[Haik]: and so it begins

2026-03-13 12:09:25 -07:00

models.py

[eric] app builder cleanup — remove Auto Run, Test Input, RenderOutput tool + Outputs activation gate

2026-05-11 09:05:45 -07:00

tools_lib.py

gmail: route OAuth refresh through cloud rotation-pool proxy

2026-05-20 01:58:59 -07:00