Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
AuthArea: what it touches
Internal ChangesKind: in v2.1.307,
Internal ChangesSection of the release
Unclear What condition decides this and whether the token is ever applied afterwards is not known.
What
CLAUDE_CODE_OAUTH_TOKEN is an environment variable holding a sign-in token. A remote connection controlling a running Claude Code can send new environment variables. When it sends this token and a certain condition holds, Claude Code no longer applies it straight away. It hands the token to a separate check and logs that the token was offered to the session's judge but not applied yet. Before, the token was applied immediately.
The log message for variables Claude Code does not accept from a remote connection was also reworded.
Why
It makes it harder for a remote connection to swap the account a running session is signed in as.
