Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
AuthArea: what it touches
Internal ChangesKind: in v2.1.274,
Internal ChangesSection of the release
What
The internal check that classifies a request as using "first_party_design_auth" now also requires a URL-based check to pass, in addition to the existing authentication lookup it already performed.
Why
This tightens how Claude Code decides a request qualifies as first-party design authentication, requiring the request's URL to also match expectations rather than relying on the auth lookup alone.
