Codex offers an OAuth endpoint, which can be used in any harness of your choice. Note this is separate from their app-server setup; in this setup, you talk directly to the API.