Skip to content

xAI SuperGrok OAuth - #199

Open
valtterivalo wants to merge 1 commit into
arcee-ai:mainfrom
valtterivalo:add-xai-auth
Open

xAI SuperGrok OAuth#199
valtterivalo wants to merge 1 commit into
arcee-ai:mainfrom
valtterivalo:add-xai-auth

Conversation

@valtterivalo

@valtterivalo valtterivalo commented Aug 18, 2026

Copy link
Copy Markdown

No description provided.

@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 6ff873b. Configure here.

self.prompt_cache_key.as_deref(),
);

if self.backend == BackendKind::XaiAuth {

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trailing slash breaks inference URL

Medium Severity

validate_base_url accepts a trailing slash on the managed SuperGrok base path, and the docs describe that as valid, but send_openai_responses builds the request URL with a raw {base}/responses join. A configured https://api.x.ai/v1/ therefore becomes https://api.x.ai/v1//responses. Model discovery already trims trailing slashes, so listing can succeed while inference fails.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 6ff873b. Configure here.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Join is untrimmed, so a configured https://api.x.ai/v1/ becomes /v1//responses. Default materialization is https://api.x.ai/v1. Live probe: both paths return 401 no-credentials, not 404. Listing vs inference URL shape differs. Inference does not fail.

@valtterivalo

Copy link
Copy Markdown
Author

I have read the CLA Document and I hereby sign the CLA

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant