Quick Recovery (60 Seconds)
If you encounter any authentication or account health issues, start here:
If the issue persists, try re-authenticating:
Common Issues
'codex auth' not recognized
'codex auth' not recognized
Browser opens unexpectedly during auth
Browser opens unexpectedly during auth
Likely cause: Normal OAuth browser-first flow.Solution: This is expected behavior. Complete the authentication in the browser and return to the terminal. The OAuth callback server runs at
http://127.0.0.1:1455/auth/callback.The browser-based OAuth flow is required by ChatGPT for secure authentication. No credentials are transmitted via the command line.
Switch succeeded but wrong account used
Switch succeeded but wrong account used
PR worktree asks for login again
PR worktree asks for login again
Likely cause: Worktree was using a different legacy path key before shared storage was added.Solution: Run
codex auth list once in the worktree to trigger migration into repo-shared storage.Background: Linked Git worktrees now share accounts via resolveProjectStorageIdentityRoot. Legacy worktree-keyed account files are auto-migrated on first load. Legacy files are retained only if the canonical write fails (to prevent data loss).'missing field id_token' error
'missing field id_token' error
Likely cause: Stale auth payload from an expired or incomplete OAuth flow.Solution: Re-login the affected account:This refreshes the entire authentication payload including the
id_token.'refresh_token_reused' error
'refresh_token_reused' error
Likely cause: Token pair rotated elsewhere (e.g., logged in from another machine or browser).Solution: Re-login the affected account to obtain a new token pair:
'token_expired' error
'token_expired' error
Likely cause: Refresh token is no longer valid (typically after 30+ days).Solution: Re-login the affected account:The proactive refresh guardian (enabled by default) should prevent this in active sessions. If you see this error frequently, ensure
proactiveRefreshGuardian: true in your settings.All accounts unhealthy
All accounts unhealthy
OAuth callback port 1455 in use
OAuth callback port 1455 in use
Likely cause: Another process (possibly a stale Kill the process and run
codex instance) is using port 1455.Solution: Stop the conflicting process and retry login.Find the process:codex auth login again.Stream stall or timeout errors
Stream stall or timeout errors
Likely cause: Network latency or SSE stream interruption.Solution: Increase the stream stall timeout:Or edit Default is 45000ms (45 seconds). Minimum is 1000ms.
~/.codex/multi-auth/settings.json:Rate limit errors despite healthy accounts
Rate limit errors despite healthy accounts
Likely cause: Quota exhaustion across all accounts.Solution:
Diagnostics Pack
When filing an issue or debugging locally, gather this information:Verify Installation and Routing
Confirm that the plugin is installed correctly and command routing is functional:Soft Reset
If all else fails, perform a soft reset to clear account and settings state:PowerShell
Bash
Issue Report Checklist
When filing an issue, attach these outputs:-
codex auth report --json -
codex auth doctor --json -
codex --version -
npm ls -g codex-multi-auth - Failing command and full terminal output
- Operating system and Node.js version
Related Resources
- Configuration Guide — Adjust timeouts and sync settings
- Account Management — Health scoring and token refresh
- Upgrading Guide — Migration from legacy installs
- CLI Commands Overview — Full command documentation