Automatic Recovery from Revoked OAuth Tokens #
OAuth tokens can be revoked server-side (e.g., when users revoke access from their Claude.ai account settings). Previously, this would cause authentication failures in various API calls. This release adds automatic token refresh when a revoked token is detected across multiple code paths:
- Fast mode prefetch (checking if your organization has fast mode enabled)
- Metrics opt-out status checks
- General API retry logic
The CLI now catches HTTP 403 responses containing "OAuth token has been revoked" and automatically refreshes the token before retrying the request.
OAuth token revocation check helper (search for "OAuth token has been revoked") — GOA() at line ~211503; token refresh function Ju() at line ~114161