Skip to content

No timeout on CLI auth HTTP client #21

Description

@dcmcand

Summary

Auth-related HTTP requests in the CLI use http.DefaultClient which has no timeout. If the server is unreachable and the connection hangs, auth login blocks indefinitely.

Location

  • cli/internal/auth/device_flow.go (line 183)

Suggested fix

Create an HTTP client with a timeout (e.g., 30 seconds) for all auth-related requests.

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity vulnerability or hardening

    Type

    No type

    Fields

    Priority

    None yet

    Start date

    None yet

    Target date

    None yet

    Size

    None yet

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions