Sign-in error when using the remote env in vscode

[wglassly]

What version of the VS Code extension are you using?

0.4.0

Which IDE are you using?

VS Code

What platform is your computer?

Darwin 24.5.0 arm64 arm

What steps can reproduce the bug?

when I use the codex at remote env, click sign-in

the browser returns: Token exchange failed: token endpoint returned status 403 Forbidden

What is the expected behavior?

No response

What do you see instead?

No response

Additional information

No response

[frondesce]

I hit the same issue in Codespaces.

• CodeX version: 0.4.0
• Local CodeX and Web app work fine
• Only in GitHub Codespaces (remote env) → /wham/environments calls return 403 Forbidden

Workaround:
Forcing the extension to run on the UI/local side instead of the remote host fixes it. Example setting in remote settings.json:

"remote.extensionKind": {
"openai.chatgpt": "ui"
}

After this, CodeX works normally in Codespaces.

[godjoem]

Workaround: Forcing the extension to run on the UI/local side instead of the remote host fixes it. Example setting in remote settings.json:

"remote.extensionKind": {
"openai.chatgpt": "ui"
}

Works for me, thx a lot.
Seems that the extension running in the host can NOT identify the files in the remote server

[frondesce]

Workaround: Forcing the extension to run on the UI/local side instead of the remote host fixes it. Example setting in remote settings.json:
"remote.extensionKind": {
"openai.chatgpt": "ui"
}

Works for me, thx a lot. Seems that the extension running in the host can NOT identify the files in the remote server

This doesn't fit my situation. As shown below, codex can see the file.
It seems that this is not a universal solution, there may be other bugs.

[asw101]

I also have to workaround this to login to Codex CLI via GitHub Codespaces (e.g. https://github.com/asw101/codespaces ).

This is the workflow I have to follow: https://youtu.be/jVxj-JQOe2Y

1. Choose Sign in with ChatGPT
2. Open the external website, https://auth.openai.com/oauth/authorize?...
3. Authenticate using my SSO
4. Be redirected to http://localhost:1455/auth/callback?... which throws ERR_CONNECTION_REFUSED
5. Open the special URL that exposes the forwarded port on :1455 on a public github.dev URL
6. Copy-paste the domain and replace the localhost:1455 in the prior URL to be able to complete authentication.

I can do this as a power user, but it is very hard for me to recommend this experience to anyone.

[ifsheldon]

The most general solution for now is to use ssh port forwarding. Just use ssh to bind the localhost:1455 on the local machine to the localhost:1455 on the remote machine. And then open the link shown on the remote terminal on the local machine. Login and wait for the callback. This is twisted but it works! Ask your local codex if it sounds a bit complex :)

[shixian64]

已解决，需要使用代理启动code

[frondesce]

已解决，需要使用代理启动code

Is there a more detailed solution?

[shixian64]

:~$ HTTPS_PROXY=http://*:**** HTTP_PROXY=http://*:**** NO_PROXY=localhost,127.0.0.1,::1 code ubuntu 终端 打开code frondesce ***@***.***> 于2025年9月16日周二 10:57写道：

…

*frondesce* left a comment (openai/codex#2869) <#2869 (comment)> 已解决，需要使用代理启动code Is there a more detailed solution? — Reply to this email directly, view it on GitHub <#2869 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BAJE53V6WEYWBT2CLBQ2GAT3S54DLAVCNFSM6AAAAACFDKRLCOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTEOJUGY3DEOBRHA> . You are receiving this because you commented.Message ID: ***@***.***>

[shixian64]

* is your vpn network agent Xian Shi ***@***.***> 于2025年9月16日周二 15:57写道：

…

:~$ HTTPS_PROXY=http://*:**** HTTP_PROXY=http://*:**** NO_PROXY=localhost,127.0.0.1,::1 code ubuntu 终端 打开code frondesce ***@***.***> 于2025年9月16日周二 10:57写道： > *frondesce* left a comment (openai/codex#2869) > <#2869 (comment)> > > 已解决，需要使用代理启动code > > Is there a more detailed solution? > > — > Reply to this email directly, view it on GitHub > <#2869 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/BAJE53V6WEYWBT2CLBQ2GAT3S54DLAVCNFSM6AAAAACFDKRLCOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTEOJUGY3DEOBRHA> > . > You are receiving this because you commented.Message ID: > ***@***.***> >

[gpeal]

This is the same as #2796 which we're working on resolving but for now, you can log in like this