Evidence · DiggingBeagle record
Hermes Agent pull request 130685: canonical native sign-in callback
Merged maintainer patch rejects browser/parser ambiguous redirect authorities and stores the canonical loopback URL; includes table-driven regression and validator tests.
- Published
- Oct 1, 2026
- Publisher
- NousResearch/hermes-agent maintainers
- Source role
- patch commit artifact
Evidence record
Merged maintainer patch rejects browser/parser ambiguous redirect authorities and stores the canonical loopback URL; includes table-driven regression and validator tests.
Claim-level citations (1)
- supportsHermes Agent PKCE callback trusted a loopback host the browser did not use: NousResearch merged pull request #130685 on October 1, 2026. It rejects noncanonical native callback addresses including backslashes and user information, canonicalizes allowed loopback URLs before storing them, and includes regression cases for browser/server authority mismatches.
Pull request #130685: What happened; Change; Verification; merged October 1