# auth: show user profile in `auth status` via core GET /me

`c2cea0a` ·  toothbrush · 1mo ago · 2 files · +195 added/-49 removed

`entire auth status` now calls the core API's GET /me, which both validates the stored token (liveness) and supplies a profile header:

Logged in to https://us.auth.entire.io  
User: Alice Smith (@alice) <alice@example.com>  
Identity: github/alice  
Token: stored in OS keychain

Active sessions:
...

/me is the primary liveness gate (a 401 surfaces as *coreapi.ErrorModelStatusCode, now recognised by isKeychainTokenRejected). The active-sessions list runs after, on the data API; since the token is already known good, a list failure degrades to a stderr warning instead of failing the command. Empty profile fields are omitted.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

## Sessions

5ca10643dc53View transcript

[?\ Refactor Auth Commands for Session Management Claude Code · Opus 4.8[1m] · 1 step](/content/gh/entireio/cli/session/d51ce65e-9ad9-4c0d-b6af-911eed02c1ee#timeline-5ca10643dc53/index.html)

## Changes

2

- cmd/entire/cli

- Mauth.go +96/-14

- Mauth_test.go +99/-35

```
12 unmodified lines

...

return newSessionsClient(token).ListSessions(ctx) //nolint:wrapcheck // ListSessions already wraps with action context

func runAuthStatus(ctx context.Context, w io.Writer, store tokenStore, list sessionLister, baseURL string) error {
...
  Token: stored in OS keychain

// authProfile is the subset of the core API's GET /me that `entire auth status` renders.
type authProfile struct {
  Handle         string
  DisplayName    string
  Email          string
  Provider       string
  ProviderUserID string
}

func defaultFetchProfile(ctx context.Context) (*authProfile, error) {
...
  return p, nil
}

func defaultListSessions(ctx context.Context) ([]api.Session, error) {
 ... 
}

func writeProfileLines(w io.Writer, p *authProfile) {
 ... 
}

// TestRunAuthStatus_NotLoggedIn tests the scenario where the user is not logged in.
func TestRunAuthStatus_NotLoggedIn(t *testing.T) {
    t.Parallel()
    store := newMockTokenStore()
    
    listCalled := false
    profileCalled, listCalled := false, false
    fetchProfile := func(context.Context) (*authProfile, error) {
        profileCalled = true
        return &authProfile{}, nil
    }

list := func(context.Context) ([]api.Session, error) {
        listCalled = true
        return nil, nil
    }

var out bytes.Buffer
    if err := runAuthStatus(context.Background(), &out, store, list, testBaseURL); err != nil {
        
    }
    ...
}