docs(cli): token credentials in the canonical auth precedence (v5.2.0) - #630

Merged

dawsontoth merged 18 commits into

mainfrom

claude/cli-token-auth-docs

Aug 25, 2026

Commits on Aug 21, 2026

docs(cli): slot token credentials into the canonical auth precedence

dawsontoth
and
claude
committed
a83c869
docs(release-notes): cover CI token credentials in 5.2
dawsontoth
committed
50292cb
docs(cli): a blank token namespace is skipped, not a hard failure
dawsontoth
committed
613c2e8

Commits on Aug 24, 2026

docs(cli): narrow two token-handling claims to what 5.2.4 actually does
dawsontoth
committed
5bd6ec0
docs(cli): split refresh-failure behavior by credential shape
dawsontoth
committed
f8e5064
docs(release-notes): scope the refresh-failure caveat to the CI credential shape
dawsontoth
committed
82412b6
docs(cli): expiry answers 403 and does not halt the command
dawsontoth
committed
4c1da6c
docs(cli): a lost target falls back to the saved login, not straight to local
dawsontoth
committed
a8b252d
docs(cli): state the one-credential-style rule once, up front
dawsontoth
committed
8b2c9ea
docs(cli): point the 403 warning at its tracking issue
dawsontoth
committed
9fa2436
docs(cli): loopback targets make a token failure succeed, not fail
dawsontoth
committed
f0d42ca
docs(cli): resolve the contradiction the loopback bullet created
dawsontoth
committed
f34693f
docs(cli): the loopback case needs configuration, not a result check
dawsontoth
committed
8f5c882
docs(cli): only authorizeLocal:false closes the loopback exposure, and it needs a restart
dawsontoth
committed
366b09c
docs(cli): the socket rule is also the limit of the loopback remediation
dawsontoth
committed
6e8e01b
docs(cli): scope the loopback remediation to a pointer, keep the hazard
dawsontoth
committed
3cd66b4
docs(security): give authorizeLocal the facts the CLI page defers to it
dawsontoth
committed
59691d4
docs(cli): local authorization applies only when no credential is attached
dawsontoth
committed
1a8dde1