s1d3sw1ped/robinhood-agentic-mcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth: Ignore tokens.json so Login output is not git-added
CI / Test and build (pull_request) Successful in 16s
Details
CI / Test and build (push) Successful in 16s
Details

Browse Source 
Login writes access/refresh tokens (and often client_secret) to
tokens.json at mode 0600. Without a gitignore entry, git add . after a
local login can stage live Agentic credentials.

Closes: #20
This commit was merged in pull request #21.
This commit is contained in:
Blake
2026-09-14 13:24:03 +00:00
parent d95e578a20
commit 96bef3ddd5
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -24,7 +24,7 @@ cfg := rh.Config{
}
```
Daemon/headless callers must not call `Login` (no browser). They call `Connect` with an existing token file (mode `0600`).
Daemon/headless callers must not call `Login` (no browser). They call `Connect` with an existing token file (mode `0600`). Keep `tokens.json` out of git (listed in `.gitignore`).
## Example