Merge pull request #35 from BunnyWay/strip-api-key

jamie-at-bunny · web-flow · commit d87e64e45526 · 2026-04-15T15:26:06.000+01:00
feat(cli/login): strip api key from browser history
diff --git a/.changeset/public-adults-hunt.md b/.changeset/public-adults-hunt.md
@@ -0,0 +1,5 @@
+---
+"@bunny.net/cli": patch
+---
+
+Strip API key from browser history after login callback
diff --git a/packages/cli/src/commands/auth/login.ts b/packages/cli/src/commands/auth/login.ts
@@ -43,6 +43,7 @@ const SUCCESS_HTML = `<!doctype html>
     <h1>Authenticated!</h1>
     <p>You can close this tab and return to the CLI.</p>
   </div>
+  <script>history.replaceState(null, "", location.pathname)</script>
 </body>
 </html>`;
 

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@bunny.net/cli": patch
 +---
++
 +Strip API key from browser history after login callback