CRE CLI version 1.22.0 is now available. The browser OAuth secrets flow is hardened: gateway requests are now forced to HTTPS and OCR response payload signatures are validated before consuming secrets responses.
Update your CLI by running cre update when prompted, or follow the CLI Installation guide for fresh installations.
