New sprite flow broken (Claude console auth issues)

pr1 · April 4, 2026, 6:41am

i just read the new blog post about paperclip and wanted to test it. so i create a new sprite, and install paperclip. so far so good. then i wanted to get claude going, and something changed since the last sprite i created. claude generates an auth link but won’t proceed to request the auth code.

authenticating claude code as been quite painful for at leas a week. before today it would open the browser but refuse to proceed after being authorised. the auth flow on claude.ai would redirect to localhost. this is still the case, but before today, claude code would at least leave an input prompt for me to come back and paste the auth code, while today it won’t even do that.

btw, gh auth is working fine.

pr1 · April 4, 2026, 6:46am

github.com/anthropics/claude-code

OAuth login broken for remote/headless server setups

opened 06:38AM - 03 Apr 26 UTC

prismon

bug has repro platform:linux area:auth

## Description `claude auth login` OAuth flow is broken when Claude Code runs o…n a remote server and the browser is on a separate local machine. The authorization code callback is not being exchanged for a token. ## Setup - Claude Code running on a remote Linux server (SSH) - Browser on a separate local machine - Using Remote Control feature, which requires full-scope OAuth login (not long-lived tokens) ## Steps to Reproduce 1. Run `claude auth login` on a remote server 2. OAuth flow directs to browser on local machine 3. Browser completes authorization, receives callback URL: `https://platform.claude.com/oauth/code/callback?code=<code>&state=<state>` 4. The authorization code is never exchanged — the local listener on the server doesn't receive the callback ## Expected Behavior The OAuth flow should complete successfully, exchanging the authorization code for a full-scope token, even when the browser and CLI are on different machines. ## Actual Behavior The callback URL isn't routed back to the CLI's listener on the remote server. The user sees the code in the browser URL but has no way to manually provide it to the CLI. Remote Control reports: "Remote Control requires a full-scope login token." ## Notes - This reportedly worked previously and has regressed - Workarounds like SSH port forwarding or copying credentials from a local machine exist but shouldn't be necessary - A device-code flow or manual code-paste option would solve this for headless/remote environments

this is likely the reason for the latest issue, i just wanted to bring up that it’s been bumpy for awhile now.