Teknium 161acb0086 fix: credential pool 401 recovery rotates to next credential after failed refresh (#4300) ...

When an OAuth token refresh fails on a 401 error, the pool recovery
would return 'not recovered' without trying the next credential in the
pool. This meant users who added a second valid credential via
'hermes auth add' would never see it used when the primary credential
was dead.

Now: try refresh first (handles expired tokens quickly), and if that
fails, rotate to the next available credential — same as 429/402
already did.

Adds three tests covering 401 refresh success, refresh-fail-then-rotate,
and refresh-fail-with-no-remaining-credentials.

2026-03-31 12:02:29 -07:00

140 KiB

Raw Blame History

View Raw