auth: Ignore tokens.json so Login output is not git-added #21

Merged

eva merged 1 commit from blake/ignore-tokens-json into develop

2026-09-14 13:30:43 +00:00

blake commented

2026-09-14 13:24:57 +00:00

Collaborator

Summary

Add tokens.json to .gitignore so Login / WriteTokens output is not staged by git add .
Note the ignore next to the existing mode-0600 guidance in README

Why

OAuth material (access/refresh, often client_secret) must not land in forge history. Closes #20.

Test plan

Confirm .gitignore matches tokens.json
git check-ignore -v tokens.json in a checkout with a local token file

## Summary - Add `tokens.json` to `.gitignore` so `Login` / `WriteTokens` output is not staged by `git add .` - Note the ignore next to the existing mode-0600 guidance in README ## Why OAuth material (access/refresh, often client_secret) must not land in forge history. Closes #20. ## Test plan - [ ] Confirm `.gitignore` matches `tokens.json` - [ ] `git check-ignore -v tokens.json` in a checkout with a local token file

blake referenced this pull request

2026-09-14 13:25:44 +00:00

auth: Ignore tokens.json so Login output is not git-added #20

Ghost changed target branch from master to develop

2026-09-14 13:28:47 +00:00

Ghost added 1 commit

2026-09-14 13:28:47 +00:00

auth: Ignore tokens.json so Login output is not git-added

CI / Test and build (pull_request) Successful in 16s

Details

CI / Test and build (push) Successful in 16s

Details

96bef3ddd5

Login writes access/refresh tokens (and often client_secret) to
tokens.json at mode 0600. Without a gitignore entry, git add . after a
local login can stage live Agentic credentials.

Closes: #20