Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
AuthArea: what it touches
Internal ChangesKind: in v2.1.238,
Internal ChangesSection of the release
What
Auth and API call paths now receive credentials as an argument rather than reaching for one process-wide set: OAuth refresh, first-party API startup load, quota checks, web fetch and remote environment listing all take and forward them, and the signed-out check became asynchronous and takes the credential object. This is groundwork for a session carrying its own credentials.
Details
A helper installs credentials on the API client and disposes and resets it when they go away.
Evidence
await ov({ credentials: e });
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
