Artifact commands now need a claude.ai login and fail fast if you're on an API key.
What's wrong with this entry?
Every artifact request (list, read, comments, delete, publish) now checks for a claude.ai OAuth token instead of accepting any authenticated session. Setups signed in by API key or other means get Not authenticated — run /login (no claude.ai login) immediately rather than a failed network call.
- The endpoints affected are
/api/frame/frames,/api/frame/read/...,/api/frame/comments/...and the artifact delete and publish paths. - The check returns
{ ok: !1, reason: "no-auth", detail: "no claude.ai login" }before any request is sent. - The token refresh that runs before each call moved into a helper that logs
firstPartyApi: refreshOAuth failedand continues with the cached token instead of failing the whole call.
no claude.ai login
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.222
MCP server panel explains a rejected claude.ai session token
Both mention login
-
v2.1.222
MCP: rejected claude.ai session token is now visible
Both mention login
-
v2.1.222
Dedicated error when claude.ai rejects a session bearer token
Both mention login