Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.223entry #111

Claude Code v2.1.223 ·

api.anthropic.com and api-staging.anthropic.com are accepted as trusted OAuth origins

Login now trusts a fixed set of Anthropic API origins unless you point it at a custom OAuth URL.

You'll notice No documentation found Improvements
JSON All of v2.1.223
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
AuthArea: what it touches
ImprovementsKind: in v2.1.223,
ImprovementsSection of the release
What

OAuth origin validation now trusts a fixed set of Anthropic API origins rather than only the origin derived from the configured base API URL.

Details
  • If CLAUDE_CODE_CUSTOM_OAUTH_URL is set, only the configured origin is trusted and the fixed set is not consulted.
  • Rejections still report a reason: not_https, userinfo_or_port or untrusted_origin.
Evidence

https://api-staging.anthropic.com

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundleCLAUDE_CODE_CUSTOM_OAUTH_URL

See this entry in the whole of v2.1.223 →

Feedback