Repository navigation
OAuth: broker stays on corevideo.iamfatness.us (Sign in with Zoom broken in beta-2026-10-25) - #1055
Merged
Merged
Conversation
beta-2026-10-25-ebc974d shipped the #1034 default of auth.corevideo.io, which does not resolve; Sign in with Zoom and token refresh failed on the owner's machine ("zoom-join: credential error No such host is known. (auth.corevideo.io:443)"). The owner's ruling: https://corevideo.iamfatness.us/oauth/callback is the Zoom app's registered redirect and the broker host does not move. - ZoomOAuthManifest defaults, src/config/zoomOAuth.json, mac ZoomOAuth.swift and the ops-monitor broker probe default go back to corevideo.iamfatness.us. - Tests pin the live host (MediaCore.Tests 2649/2649; ops-monitor vitest 23/23). - production-endpoints.md, CLAUDE.md, BACKLOG and the runbooks record the ruling; telemetry.corevideo.io / ops.corevideo.io remain owner checklist items. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What was wrong
beta-2026-10-25-ebc974d is the first build to ship the #1034 default broker
https://auth.corevideo.io. That host does not exist in DNS (NXDOMAIN tonight), so on the owner's machine:The owner's ruling (2026-10-25):
https://corevideo.iamfatness.us/oauth/callbackis the redirect registered with the Zoom app; the broker host does not move. The old broker answers on that host today (/oauth/startprobe returns the expected 400).What changed
ZoomOAuthManifestdefaults,src/config/zoomOAuth.json,mac-shell/.../ZoomOAuth.swift, and the ops-monitor broker probe default are back oncorevideo.iamfatness.us(exactly the values of beta-2026-10-23-1072a50, which signed in fine).ZoomOAuthManifestTests,MediaCorePathsTests,ZoomOAuthServiceTests,worker.test.mjs.docs/reference/production-endpoints.md,CLAUDE.md,docs/BACKLOG.md,secrets-and-oauth.md, the operator runbook, SDK packaging doc, third-party inventory andload-staging-env.ps1record the ruling.telemetry.corevideo.io/ops.corevideo.ioare untouched and remain owner checklist items.Tests
CoreVideoPro.MediaCore.TestsRelease: 2649/2649 (the two host assertions were flipped first and failed, then passed after the default change).services/ops-monitor/worker.test.mjs: 23/23.Workaround on an installed beta-2026-10-25-ebc974d
User env
COREVIDEO_ZOOM_OAUTH_BROKER_START_URL=https://corevideo.iamfatness.us/oauth/start, then restart the app. Redeem and SDK-JWT derive from that base; the broker ignores the shell's callback query parameter.Not done: a live Sign in with Zoom on a build cut from this commit.
🤖 Generated with Claude Code