wbtiger
993896ad6f
- Prefer autologin cookie over response body token (body token may be CSRF/session token) - Use cookiejar to capture cookies across redirects - Try all candidate tokens and verify each with /users/me API call - Detect keyring store/load mismatch and auto-fallback to file storage - Login now fails fast if no candidate token works, instead of silently storing a bad token Fixes Windows 401 "无效token" after successful login. Also improves reliability on headless Linux (no Secret Service) and edge cases on macOS. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| auth | ||
| client | ||
| config | ||
| context | ||
| output | ||