1 files changed, 15 insertions, 0 deletions

diff --git a/src/client/database.rs b/src/client/database.rs
index c4601b5..40ee8b4 100644
--- a/src/client/database.rs
+++ b/src/client/database.rs
@@ -151,6 +151,21 @@ pub fn forget_host(conn: &Connection, host: &str) -> Result<ForgetOutcome, rusql
     })
 }
 
+/// Forget the saved login for a server identity ("forget saved login").
+///
+/// Trust is untouched: the pinned key stays in `hosts`, so the next connection
+/// only asks for a password. Returns whether a credential was actually stored.
+pub fn forget_credentials(
+    conn: &Connection,
+    fingerprint: &str,
+) -> Result<bool, rusqlite::Error> {
+    let removed = conn.execute(
+        "DELETE FROM credentials WHERE fingerprint = ?1",
+        [fingerprint],
+    )?;
+    Ok(removed > 0)
+}
+
 /// List all remembered hosts with their fingerprints.
 pub fn get_all_hosts(conn: &Connection) -> Vec<(String, Option<String>)> {
     let mut stmt = conn