Under the hood
Clearing the pending OAuth step-up scope on token save now only happens when handleRedirection is set
What
When Claude Code saves or refreshes an MCP (Model Context Protocol) OAuth token, it can clear a stored _pendingStepUpScope value, which tracks a scope the user still needs to re-authorize. This clearing used to happen unconditionally on token save, or on any change to the access token, at two different call sites. Both now only clear it if (this.handleRedirection).
Why
This avoids discarding a pending re-authorization request in situations that aren't actually handling a redirect, so a scope still waiting on the user's approval isn't silently forgotten.