Claude Code v2.1.0 ·
OAuth URL Parameter Redaction
EntryKind: in v2.1.0,
ChangesSection of the release
Sensitive OAuth parameters are now redacted from URLs in logs and error messages for improved security.
Details
- Redacts:
state, nonce, code_challenge, code_verifier, code - Parameters are replaced with
[REDACTED] in logged URLs
Evidence
gB2() at line 296262 (contains Q.searchParams.set(B, "[REDACTED]"))
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
See this entry in the whole of v2.1.0 →
