xcecli logout only removed the token from the local config, so the token stayed valid on the server until it expired. It now first sends POST /xce/v1/auth/logout with the bearer token (APIClient.Logout), which revokes it server side since bug-1946. Best effort: if the server is unreachable or rejects the token, the local login info is still cleared and a warning says the revocation could not be confirmed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| format | ||
| output | ||
| request | ||
| utils | ||