{"version":"2.1.302","anchor":"injected-host-oauth-token-used-for-remote-settings-fetch-and","canonical_anchor":"injected-host-oauth-token-used-for-remote-settings-fetch-and","heading":"Groundwork for a hybrid sign-in with an injected organization token","tier":"use","area":"Managed Settings","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.302\/e\/injected-host-oauth-token-used-for-remote-settings-fetch-and","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.302","markdown":"### Groundwork for a hybrid sign-in with an injected organization token\n\nClaude Code gains hybrid sign-in state and can fetch remote managed settings with a token supplied by the program hosting it\n\n**Unclear.** What the host check requires is not stated, so it is unclear when `--host-auth-is-org-sign-in` takes effect.\n\n**What**\n\nThese changes prepare for a sign-in where the program hosting Claude Code hands it a token for an organization:\n\n- Remote managed settings, which an organization pushes to Claude Code, can now be fetched with an injected token. It is tried after an API key and before your profile credential, sent as a `Bearer` header, and also used to tell cached settings apart. It is used only when the host passes `--host-auth-is-org-sign-in`.\n\n- The settings fetch takes a `hybridOrganizationUuid`, and background checks set `refreshesHybridToken`, which is true by default.\n\n- Sign-in state gains `hybridTokenRenewalDue`, `hybridOrganizationUuid` and `hybridSignInEnded`, and another request builder also receives `hybridOrganizationUuid`.\n\n- The session tunnel now reads an `env` list from what it is sent, applies its text values as environment variables, and logs how many it applied.\n\n**Why**\n\nThis mostly concerns programs that embed Claude Code. It means a hosted session can supply a token and environment variables to Claude Code and have it fetch managed settings with that token.\n\n- Area: Managed Settings\n- Tier: Use it now\n- Useful: 4\/5\n- Signal: 5\/5\n- Scope: both\n- Heads-up: no"}