---
title: 'yorker login: device-code flow for cross-browser auth'
description: 'The CLI now uses a poll-based device-code flow modeled on Vercel and GitHub, so login works in every browser, including Safari.'
date: '2026-05-09'
category: 'feature'
canonical_url: 'https://yorkermonitoring.com/changelog/2026-05-09-yorker-login-device-code'
---

`yorker login` now uses a device-code flow. The CLI prints a short
`XXXX-XXXX` code and opens your browser to a confirmation page. You verify
the code matches, click Authorize, and the CLI polls until it picks up the
fresh credential. No more localhost callbacks, which Safari blocked on the
https-to-http hop in the previous release.

`@yorker/cli@0.6.0` (published 2026-05-08) relies on a localhost
listener that this server release no longer talks to, so its `yorker
login` will hang. Update to the next CLI release shipped after this
entry, where the polling flow is wired end-to-end. Older CLI versions
that authenticate via `YORKER_API_KEY` are unaffected.