v1.16.3
This release stores your session token in the OS keyring on macOS and Windows and shares it with the coder CLI, so signing in to the extension signs in the CLI too. The extension asks before it signs the CLI out, and before it uses a CLI session that belongs to a different user. Connecting to a deployment that redirects now works with Coder CLI 2.38.0 or later.
Highlights
Keyring Storage Shared with the Coder CLI
Your session token is now stored in the OS keyring instead of a plaintext file. The coder CLI reads the same keyring entry, so signing in to the extension signs in the CLI too. (#1107, closes #1106)
- Requires Coder CLI 2.29.0 or later on macOS (Keychain) or Windows (Credential Manager). Linux and older CLIs keep using a file.
- The CLI is signed in once the extension has downloaded it.
- To opt out, set
coder.useKeyringtofalse.
Important
The extension and the CLI now share one session. Signing in here switches the CLI to the same deployment. If you use the CLI with a different deployment, run coder login again afterwards.
When you sign out
- If the CLI shares your session, the extension asks whether to sign the CLI out too. Signing the CLI out revokes the token, so every tool using it is signed out.
- Coder: Manage Credentials asks the same question for a single deployment. Remove All signs the CLI out wherever it shares a session, and its confirmation says so.
- OAuth sessions skip the question, since signing out revokes the token anyway.
When you sign in
- If the CLI is signed in as a different user than you were, the extension asks before using that session.
- Signing in with the CLI's session, or sharing its config directory, needs Coder CLI 2.32.0 or later (previously 2.31.0).
Settings and environment variables
coder.useKeyringis passed to the CLI as--use-keyring, soCODER_USE_KEYRINGno longer overrides it.CODER_CONFIG_DIRworks like--global-configincoder.globalFlags: the extension shares that config directory, and its login, with the CLI.
Improvements
- Clearer credential errors. If the CLI cannot store your token at login, the error offers Open Settings to change
coder.useKeyring. If signing out cannot remove every credential, the warning offers Show Output. (#1107) - Tidier workspaces menu. The ... menu now lists Switch Deployment and Logout together, with Network Check in its own group. (#1111)
Bug Fixes
- Redirecting deployments work with Coder CLI 2.38.0 or later. That CLI version refuses a redirected URL unless it gets
--allow-redirects, socoder login,coder logout, andcoder sshfailed. The extension now passes the flag. (#1107)
Full changelog: v1.16.2...v1.16.3