docs(coding-agent): shorten device-code login guidance

This commit is contained in:
Petr Houška 2026-10-09 00:38:00 +02:00
parent 7151099d02
commit 90d5cf7846

View file

@ -138,7 +138,7 @@ An OAuth provider supplies a display name, login flow, token refresh, and access
OAuth callbacks are UI-neutral. They can open an authorization URL, show a device code, report progress, request input, or ask the user to choose a login method. Honor cancellation and the supplied abort signal during network requests.
Device-code login offers browser opening and code copying on Enter (`tui.select.confirm`) by default. Confirmation is optional; users can complete login manually without opening a browser or changing the clipboard. Set `openBrowserOnConfirm` or `copyCodeOnConfirm` to `false` in the `onDeviceCode` payload to disable either action. Native `AuthEvent` device-code notifications support the same flags.
Press Enter (`tui.select.confirm`) to open the device-login URL and copy the code, or log in manually. Providers can disable either action with `openBrowserOnConfirm: false` or `copyCodeOnConfirm: false` in `onDeviceCode` or native `AuthEvent` notifications.
Never write access tokens, refresh tokens, authorization headers, or complete provider responses to ordinary logs.