basset auth - basset

A device-grant login — a browser opens on any machine, sign in there, and the CLI on this machine gets a signed credential back. No password ever touches this machine. Opens a browser for sign-in. Creates an account on first use.

basset auth login

Flag	Default	Meaning
`--auth-url`	`https://auth.basset.dev`	The auth service to sign in against.
`--org`	the one login stored	Organization slug.

status

Shows who this machine is signed in as. The default when auth is run with no subcommand.

basset auth status

logout

Forgets the credential stored on this machine.

basset auth logout

login and status also accept --org, --endpoint, --plaintext (dial without TLS, for an rpc running locally), and --json (print JSON even at a terminal). logout takes no flags.