kylon-cli 0.2.0-next.155 → 0.2.1-next.157

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +7 -4
  2. package/dist/kylon-bundle.mjs +1 -1
  3. package/package.json +2 -2
package/README.md CHANGED
@@ -91,10 +91,13 @@ npm install -g kylon-cli@latest && kylon auth login --workspace <WORKSPACE_ID>
91
91
  ```
92
92
 
93
93
  The CLI opens Kylon in your browser. After you sign in, confirm the installation
94
- and workspace shown on the authorization page. Kylon then creates one credential
95
- for that CLI installation and workspace. The secret is delivered directly to the
96
- local CLI callback and saved in the versioned credential collection at
97
- `~/.kylon/workspace-auth.json` with mode `0600`; it is not displayed in Settings.
94
+ and workspace shown on the authorization page, and verify that its confirmation
95
+ code matches the one printed in your terminal. The browser approves a short-lived
96
+ request but never receives the credential. The CLI proves possession of its PKCE
97
+ verifier while polling Kylon over HTTPS, receives the credential directly from
98
+ the API, and saves it in the versioned credential collection at
99
+ `~/.kylon/workspace-auth.json` with mode `0600`. No loopback listener, incoming
100
+ port, or browser request to localhost is used.
98
101
  The collection keeps credentials separately by server and workspace, and
99
102
  `--scope-workspace` selects the matching entry.
100
103