You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.314,
ImprovementsSection of the release
What
When you set up the GitHub app, Claude Code signs you in and creates a long-lived token, a saved credential that lets it act on your behalf. Before, it accepted that token as soon as sign-in finished. Now it checks the token first:
If the check refuses the token, Claude Code shows the refusal message exactly as given and does not offer a retry.
If you cancelled the setup dialog while a token was being held back, that token is revoked so it cannot be used.
Why
It adds a policy check to the path that creates long-lived tokens, so a token that should not be issued is not quietly accepted.
