Console profile login refusals now say which condition blocked you, like an API key in your environment.
What's wrong with this entry?
When logging into a Console profile is refused, the refusal now carries a specific class such as a workload-identity environment quad, a third-party provider, an API key in the environment, a foreign profile, or a custom credentials path, and a table decides which of those are hard refusals.
- The
ANTHROPIC_API_KEYrefusal now only fires when the credential actually in use came from that environment variable. - Profile names are validated: only
A-Z a-z 0-9 _ . -are allowed, and.and..are rejected.
Console profile login refused: non-dispatching env API key present
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.234
Signing back into the same account keeps a pending auto-resume
Both mention auth
-
v2.1.234
Token screen reports actual remaining validity
Both mention auth
-
v2.1.234
Setup-token login result carries the expiry
Both mention auth