{"version":"2.1.242","anchor":"gateway-credentials-reworked-with-a-tls-pin-store","canonical_anchor":"gateway-credentials-reworked-with-a-tls-pin-store","heading":"Gateway credentials reworked with a TLS pin store","tier":"notice","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242\/e\/gateway-credentials-reworked-with-a-tls-pin-store","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.242","markdown":"### Gateway credentials reworked with a TLS pin store\n\nGateway credential handling reuses pinned entries and gives clearer errors for bad base URLs.\n\n**What**\n\nWith `CLAUDE_CODE_USE_GATEWAY` set, credential handling now runs in its own step before the normal path: it reuses an already-pinned entry when the token matches instead of re-pinning on every call, keeps the previously pinned URL, and reports a bad `ANTHROPIC_BASE_URL` as a typed error rather than a generic one. Two new messages explain the pin store refusing a credentials file that is a symlink or unreadable.\n\n**Details**\n\n- Requires `CLAUDE_CODE_USE_GATEWAY` together with `ANTHROPIC_BASE_URL` and `ANTHROPIC_AUTH_TOKEN`.\n- The existing warning for a missing base URL or auth token is unchanged.\n\n**Evidence**\n\n`gateway TLS pin store refused: the credentials file is a symlink`\n\n- Area: Auth\n- Names: `CLAUDE_CODE_USE_GATEWAY`, `ANTHROPIC_BASE_URL`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5"}