Pointing the gateway's key-set URL at a loopback address still needs that environment variable set.
What's wrong with this entry?
An earlier reading of this build suggested the check behind CLAUDE_GATEWAY_ALLOW_LOOPBACK had been removed. It has not: the check and its error text are unchanged, so pointing the gateway's key-set URL at a loopback address still requires that environment variable to be set.
- The code moved position in the bundle rather than being deleted.
- Without the variable, a loopback target is rejected with the message naming
cri.jwks_url.
cri.jwks_url targets loopback but CLAUDE_GATEWAY_ALLOW_LOOPBACK is not set
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.238
Loopback JWKS overrides now require an explicit test escape hatch
Both mention gateway allow loopback
-
v2.1.228
Gateway customer-routed inference config, disabled by default
Both mention gateway allow loopback