Tools
Codex's login success page could redirect your ID token to any URL passed in platform_url
openai/codex PR #44670 (merged 2026-09-10) says the login success pages built an organization-setup redirect that included the ID token from a `platform_url` query parameter, so an arbitrary destination could receive the token. The fix requires an exact match on https://platform.openai.com or https://platform.api.openai.org, on both the current and the legacy success pages. Codex publishes no release notes for this, so if you run Codex builds, the only way to see the fix is the commit log.
Source
↳ Follow the thread