A rejected session can now tell you it's stale and needs re-login, not just untrusted device.
What's wrong with this entry?
A 403 from the code-session request helper can now report a stale session needing re-login, not just an untrusted device.
- The helper always parses the error resource on a 403.
- Still returns
untrusted_deviceas before. - Additionally surfaces
session_stale_reloginwhen the call site is taggedelevated_auth. - Replaces the old
classifyUntrustedDeviceoption object. - The user-facing re-login message itself already existed in 2.1.224.
Your session has expired for the trusted-device check. Run /login to re-authenticate, then retry.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.