Remote settings fetching now has a fallback credential path for Workload Identity Federation (WIF): when no API key or user OAuth token is available, it obtains a bearer token via getWIFTokenCache/getWIFCredentials and marks the request with profileBearer: true. A 401 with this credential triggers one forced refresh and retry; if the settings endpoint rejects the refreshed token too, a settingsBearerRejected latch stops further retries with that credential until the next sign-in or restart.
New WIF (Workload Identity Federation) profile-credential path for remote settings
Remote settings can authenticate with a Workload Identity Federation bearer token when no API key or OAuth token exists.
Under the hoodTier: how much it should matter to you
4Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
SettingsArea: what it touches
Internal ChangesKind: in v2.1.257,
What probably matters to youSection of the release