feat: Implement multi-account Configuration Profiles#358

Closed

joeVenner wants to merge 34 commits intogoogleworkspace:mainfrom

Commits on Mar 7, 2026

feat(auth): add configuration profiles for account switching
joeVenner
committed
fix(auth): centralize base_dir resolution and fix arg parsing
joeVenner
committed
fix(auth): prevent path traversal and centralize profile resolution
joeVenner
committed
fix(auth): handle file removal errors during profile switch
joeVenner
committed
refactor(auth): deduplicate profile logic and paths
joeVenner
committed
fix(auth): prevent path traversal from disk active_profile
joeVenner
committed
Update src/auth_commands.rs

joeVenner
and
gemini-code-assist[bot]
authored
fix(auth): resolve profile parsing compiler error and simplify iteration
joeVenner
committed
fix(auth): prevent empty profile names in validation
joeVenner
committed
fix(auth): secure cross-platform profile names and parsing
joeVenner
committed
fix(auth): secure configuration config env vars from path traversal and system directories
joeVenner
committed
fix(cli): prevent subcommands from being parsed as profile names
joeVenner
committed
fix(cli): allow profile names to match service names
joeVenner
committed
fix(cli): resolve --help regression and async auth file system I/O
joeVenner
committed
fix(auth): make config path security check cross-platform
joeVenner
committed
fix(cli): resolve --api-version parsing regression
joeVenner
committed
fix(auth): prevent symlink traversal and enforce lowercase profiles
joeVenner
committed
fix(auth): secure config symlink TOCTOU vulnerability
joeVenner
committed
fix(auth): secure path configuration fallback from dot-dot traversals
joeVenner
committed
fix(auth): reject profile names starting with a hyphen
joeVenner
committed
refactor: tokio async migration and clap --profile integration
joeVenner
committed
fix(auth): secure TOCTOU vulnerability and replace blocking exists calls
joeVenner
committed
fix(auth): replace remaining std::fs blocking operations with tokio::fs in keyring access
joeVenner
committed
fix(auth): handle non-existent GOOGLE_WORKSPACE_CLI_CONFIG_DIR gracefully
joeVenner
committed
fix(auth): safely modify unix permissions reading metadata prior to replacing them
joeVenner
committed
fix(async): replace remaining std::fs blocking I/O calls with tokio::fs in discovery and token storage
joeVenner
committed
fix(auth): add missing parent check to config path validation and standardize status JSON output
joeVenner
committed
fix(security): address TOCTOU canonical parent symlink vulnerability and prevent keyring IO lock contention
joeVenner
committed
refactor: extract duplicated security checks, simplify async I/O token blocks, and consolidate keyring cache write-locks
joeVenner
committed
fix(security): resolve TOCTOU config directory race condition via proactive creation
joeVenner
committed
fix(cli): replace thread-unsafe std::env::set_var with OnceLock for profile argument propagation
joeVenner
committed
refactor: replace static RwLock cache with idiomatic tokio::sync::OnceCell for credential key initialization
joeVenner
committed
fix(security): resolve final sync I/O traces across async credential scopes and harden test isolation
joeVenner
committed

Commits on Mar 10, 2026

Merge pull request #1 from joeVenner/feat/configuration-profiles
joeVenner
authored