Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
AuthArea: what it touches
Internal ChangesKind: in v2.1.312,
Internal ChangesSection of the release
What
When a request to the sessions service is refused with a 401 error (the server's answer for "not signed in or token not accepted"), Claude Code can report the sign-in token that was sent. That report now only happens when the request passes an extra check. Claude Code also now reads the token out of the request's sign-in header with a dedicated parser, instead of simply cutting off the text "Bearer " at the start.
Why
This narrows the cases in which a rejected token is reported.
