Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
AuthArea: what it touches
Bug FixesKind: in v2.1.274,
Bug FixesSection of the release
What
When Claude Code saves or refreshes an MCP (Model Context Protocol) OAuth token, it can clear a stored _pendingStepUpScope value, which tracks a scope the user still needs to re-authorize. This clearing used to happen unconditionally on token save, or on any change to the access token, at two different call sites. Both now only clear it if (this.handleRedirection).
Why
This avoids discarding a pending re-authorization request in situations that aren't actually handling a redirect, so a scope still waiting on the user's approval isn't silently forgotten.
