298120ec · zzmq.dev@gmail.com/zz
Commit
298120ecee5cbf6ec7bab4265998bb6831ea1dad
Fix zz login's OAuth state-mismatch for anyone with no prior credentials DEFAULT_API_BASE was still the pre-zzmq.dev workers.dev host after the OAuth redirect URIs were flipped to zzmq.dev earlier this session. A fresh `zz login` with no ~/.zz/credentials.json yet falls back to this default to open the browser -- so it opened zz-maintainer.thoward37.workers.dev/login, setting the state cookie on that host, while the OAuth provider's callback (per the now-pinned redirect_uri) always lands on zzmq.dev -- a different host, so the cookie never arrives. Same bug as before, same fix, just the other side of the same host mismatch. Reproduced live after the user wiped their local ~/.zz/ state for a clean-slate test.
Troy Howard <thoward37@gmail.com> -- 2026-10-13T06:56:44.000Z