feat(auth): add configuration profiles for account switching by joeVenner · Pull Request #289 · googleworkspace/cli

feat(auth): add configuration profiles for account switching

joeVenner

committed

fix(auth): centralize base_dir resolution and fix arg parsing

joeVenner

committed

fix(auth): prevent path traversal and centralize profile resolution

joeVenner

committed

fix(auth): handle file removal errors during profile switch

joeVenner

committed

refactor(auth): deduplicate profile logic and paths

joeVenner

committed

fix(auth): prevent path traversal from disk active_profile

joeVenner

committed

Update src/auth_commands.rs

joeVenner

and

gemini-code-assist[bot]

authored

fix(auth): resolve profile parsing compiler error and simplify iteration

joeVenner

committed

fix(auth): prevent empty profile names in validation

joeVenner

committed

fix(auth): secure cross-platform profile names and parsing

joeVenner

committed

fix(auth): secure configuration config env vars from path traversal and system directories

joeVenner

committed

fix(cli): prevent subcommands from being parsed as profile names

joeVenner

committed

fix(cli): allow profile names to match service names

joeVenner

committed

fix(cli): resolve --help regression and async auth file system I/O

joeVenner

committed

fix(auth): make config path security check cross-platform

joeVenner

committed

fix(cli): resolve --api-version parsing regression

joeVenner

committed

fix(auth): prevent symlink traversal and enforce lowercase profiles

joeVenner

committed

fix(auth): secure config symlink TOCTOU vulnerability

joeVenner

committed

fix(auth): secure path configuration fallback from dot-dot traversals

joeVenner

committed

fix(auth): reject profile names starting with a hyphen

joeVenner

committed

refactor: tokio async migration and clap --profile integration

joeVenner

committed

fix(auth): secure TOCTOU vulnerability and replace blocking exists calls

joeVenner

committed

fix(auth): replace remaining std::fs blocking operations with tokio::fs in keyring access

joeVenner

committed

fix(auth): handle non-existent GOOGLE_WORKSPACE_CLI_CONFIG_DIR gracefully

joeVenner

committed

fix(auth): safely modify unix permissions reading metadata prior to replacing them

joeVenner

committed

fix(async): replace remaining std::fs blocking I/O calls with tokio::fs in discovery and token storage

joeVenner

committed

fix(auth): add missing parent check to config path validation and standardize status JSON output

joeVenner

committed

fix(security): address TOCTOU canonical parent symlink vulnerability and prevent keyring IO lock contention

joeVenner

committed

refactor: extract duplicated security checks, simplify async I/O token blocks, and consolidate keyring cache write-locks

joeVenner

committed

fix(security): resolve TOCTOU config directory race condition via proactive creation

joeVenner

committed

fix(cli): replace thread-unsafe std::env::set_var with OnceLock for profile argument propagation

joeVenner

committed

refactor: replace static RwLock cache with idiomatic tokio::sync::OnceCell for credential key initialization

joeVenner

committed

fix(security): resolve final sync I/O traces across async credential scopes and harden test isolation

joeVenner

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(auth): add configuration profiles for account switching#289

feat(auth): add configuration profiles for account switching#289
joeVenner wants to merge 33 commits intogoogleworkspace:mainfrom
joeVenner:feat/configuration-profiles

Commits on Mar 7, 2026

feat(auth): add configuration profiles for account switching

fix(auth): centralize base_dir resolution and fix arg parsing

fix(auth): prevent path traversal and centralize profile resolution

fix(auth): handle file removal errors during profile switch

refactor(auth): deduplicate profile logic and paths

fix(auth): prevent path traversal from disk active_profile

Update src/auth_commands.rs

fix(auth): resolve profile parsing compiler error and simplify iteration

fix(auth): prevent empty profile names in validation

fix(auth): secure cross-platform profile names and parsing

fix(auth): secure configuration config env vars from path traversal and system directories

fix(cli): prevent subcommands from being parsed as profile names

fix(cli): allow profile names to match service names

fix(cli): resolve --help regression and async auth file system I/O

fix(auth): make config path security check cross-platform

fix(cli): resolve --api-version parsing regression

fix(auth): prevent symlink traversal and enforce lowercase profiles

fix(auth): secure config symlink TOCTOU vulnerability

fix(auth): secure path configuration fallback from dot-dot traversals

fix(auth): reject profile names starting with a hyphen

refactor: tokio async migration and clap --profile integration

fix(auth): secure TOCTOU vulnerability and replace blocking exists calls

fix(auth): replace remaining std::fs blocking operations with tokio::fs in keyring access

fix(auth): handle non-existent GOOGLE_WORKSPACE_CLI_CONFIG_DIR gracefully

fix(auth): safely modify unix permissions reading metadata prior to replacing them

fix(async): replace remaining std::fs blocking I/O calls with tokio::fs in discovery and token storage

fix(auth): add missing parent check to config path validation and standardize status JSON output

fix(security): address TOCTOU canonical parent symlink vulnerability and prevent keyring IO lock contention

refactor: extract duplicated security checks, simplify async I/O token blocks, and consolidate keyring cache write-locks

fix(security): resolve TOCTOU config directory race condition via proactive creation

fix(cli): replace thread-unsafe std::env::set_var with OnceLock for profile argument propagation

refactor: replace static RwLock cache with idiomatic tokio::sync::OnceCell for credential key initialization

fix(security): resolve final sync I/O traces across async credential scopes and harden test isolation