muster release v5.33.2

Fixed

  • auth://status no longer points SSO servers in reauth_required at core_auth_login. A token-forwarding or token-exchange server whose SSO attempt failed read reauth_required with auth_tool: core_auth_login, but core_auth_login refuses every SSO server, so a client that followed the field got an error and used up its login attempts. auth_tool is now set only for servers that are not SSO, whatever their status, which matches list_tools’ servers_requiring_auth. For an SSO server in reauth_required, the fix is to re-authenticate to muster, and sso_attempt_failed and error say why. (#1000)