{"version":"2.1.300","anchor":"cloud-sessions-oauth-sign-in-and-token-storage-for-console-s","canonical_anchor":"cloud-sessions-oauth-sign-in-and-token-storage-for-console-s","heading":"Cloud sessions get their own sign-in, so Console accounts can use them","tier":"notice","area":"Auth","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-sessions-oauth-sign-in-and-token-storage-for-console-s","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### Cloud sessions get their own sign-in, so Console accounts can use them\n\nA separate cloudSessionsOauth sign-in lets Console users reach cloud sessions; logout revokes it, and cloud mode skips local signed caches\n\n**Unclear.** What starts this sign-in, and whether it is switched on for everyone, is not known.\n\n**What**\n\nCloud sessions (Claude Code sessions that run on another machine) used to need a claude.ai sign-in. Claude Code now keeps a separate credential for them, `cloudSessionsOauth`:\n\n- Sign-in: a browser sign-in flow for cloud sessions checks that the organization and account match, and times out after 5 minutes ('The browser sign-in for cloud sessions timed out after 5 minutes. Try again.'). The credential is stored and refreshed under a lock.\n\n- Session calls: requests for cloud-session events, titles, archiving and polling now use a token from your profile and skip the trusted-device header when a profile is in use.\n\n- Logout: logging out now revokes and removes the `cloudSessionsOauth` refresh token as well. Before, only the design sign-in token was revoked.\n\n- Cloud mode: when running as a cloud (cowork) session, remote settings are passed through a transform, no signature is kept, the signed-cache check is skipped and clearing the cache does nothing. The secure-storage write lock is bypassed in some cases and no local storage folder is used.\n\n- Smaller changes: the skills sync request passes along an `earlyAnswer` value, and settings error objects carry a new `loadedWithoutGuardHook` field.\n\n**Why**\n\nPeople who sign in through the Console, not claude.ai, can now reach cloud sessions. Logging out now also ends that cloud-session access.\n\n- Area: Auth\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5\n- Scope: both\n- Heads-up: no"}