feat: Sign in to boxel-cli through the browser - #5661

Merged

lukemelia merged 18 commits into

mainfrom

cs-12370-authorize-cli-via-web-browser

Aug 4, 2026

Commits on Jul 30, 2026

Sign in to boxel-cli through the browser

lukemelia
and
claude
committed
5041d36

Commits on Jul 31, 2026

Cover the CLI's browser sign-in against the mock OIDC provider

lukemelia
and
claude
committed
db6cf35
Use an obviously synthetic Matrix ID in the SSO fixtures

lukemelia
and
claude
committed
d571de2
Sign in through the Boxel authorization page, not straight to Google

lukemelia
and
claude
committed
0857bb5

Commits on Aug 3, 2026

Point the CLI at the right host app origin per environment

lukemelia
and
claude
committed
972ebcf
Serve the CLI sign-in page from the realm server

lukemelia
and
claude
committed
6592011
Identify the CLI's callback by port instead of by URL

lukemelia
and
claude
committed
7011a76
Give the CLI authorization page the sign-in screen's chrome

lukemelia
and
claude
committed
a6502b9
Space the submit button off the password field

lukemelia
and
claude
committed
3b6b613
Wait a quarter of an hour for the browser sign-in

lukemelia
and
claude
committed
8e3fb6a
Prefill the username on the CLI authorization page

lukemelia
and
claude
committed
13db5cc
Open the sign-in page on the app's origin in local dev

lukemelia
and
claude
committed
10d5bb4
Reset a password without leaving the CLI authorization

lukemelia
and
claude
committed
4c2e826
Ask the homeserver about Google directly

lukemelia
and
claude
committed
b2f855d
Release the handles that outlive a browser sign-in

lukemelia
and
claude
committed
9d4ea3b
Destroy the callback connections, not just the idle ones

lukemelia
and
claude
committed
4a34e1f
Answer a callback the listener cannot parse, and close once

lukemelia
and
claude
committed
20f35f3
Select the CLI authorization fields as they are rendered

lukemelia
and
claude
committed
a21453e