🧩 Codex Skill: Codex Auth Session Refresh#

This is an OpenClaw skill for Codex CLI. It provides Windows tooling to refresh Codex's auth.json with a fresh ChatGPT session token.

適用於 Codex · For Codex CLI users

---

🎯 Who Is This For?#

Codex CLI users who are stuck with any of these:

😤 Pain💥 Why it sucksCodex OAuth won't completeProxies, WSL, containers — browser never opensOpenAI 2FA every timeToken expires every few hoursForced to use API proxiesCan't get official auth working, settle for third-partyToken dies mid-sessionLose context, workflow destroyed

What This Does#

Extracts a fresh access_token from your existing ChatGPT browser session and writes it directly to Codex's ~/.codex/auth.json. No reverse engineering. No MITM. No API abuse.

适用于 Codex CLI！Codex 走不了 OAuth 时的救星。

Quick Install (on Windows)#

powershell

git clone https://github.com/zcz-user/codex-auth-session-refresh.git
cd codex-auth-session-refresh
npm install
.\login-profile.ps1        # Login ChatGPT → press Enter
.\status.ps1               # Check Codex auth state

Then Codex will see the fresh token in ~/.codex/auth.json.

Installation via ClawHub#

bash

clawhub install codex-auth-session

Commands (for Codex auth management)#

CommandWhat it doeslogin-profile.ps1First login / re-login into ChatGPT (for Codex)run-refresh.ps1Refresh Codex's access token nowstatus.ps1Check Codex auth.json statusinstall-scheduled-task.ps1Auto-refresh Codex auth every N hourscreate-desktop-toolbox.ps1Desktop shortcuts for Codex auth management

How It Works#

text

You (browser login to ChatGPT)
        │
        ▼
Playwright → chatgpt.com/api/auth/session → accessToken
                                                  │
                                                  ▼
                                        ~/.codex/auth.json
                                        (backup created before update)
                                                  │
                                                  ▼
                                  Windows Scheduled Task
                                  (auto-refresh, so Codex never loses auth)

Security#

• Token values are never logged — delete safe.token before write
• auth.json backed up with timestamp before every update
• All sensitive paths excluded via .gitignore

Requirements#

• OS: Windows 10/11
• Runtime: Node.js 18+
• Browser: Chrome or Microsoft Edge
• Target: Codex CLI by OpenAI