The gcloud CLI has a print-access-token command that is helpful for piping to other CLI tools and debugging authentication issues. The otdfctl CLI should expose similar functionality.
It should also be possible to clear cached credentials from the OS keyring.