blob: 40a31165f85ae7266bca43a480c08b891b131c7a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
#!/usr/bin/env bash
# check-token: Verify Claude OAuth token is valid against the Anthropic API.
# Usage: check-token [--refresh] [--retry-task <id-prefix>]
# --refresh re-authenticate via claude CLI if token is bad
# --retry-task <id> after a successful token check/refresh, retry that task
#
# Exit codes: 0=valid, 1=expired/invalid, 2=credentials file missing
set -euo pipefail
CREDS="/root/.claude/.credentials.json"
REFRESH=0
RETRY_TASK=""
while [[ $# -gt 0 ]]; do
case "$1" in
--refresh) REFRESH=1; shift ;;
--retry-task) RETRY_TASK="$2"; shift 2 ;;
*) echo "Unknown arg: $1" >&2; exit 2 ;;
esac
done
if [[ ! -f "$CREDS" ]]; then
echo "ERROR: credentials file not found: $CREDS" >&2
exit 2
fi
ACCESS_TOKEN=$(python3 -c "
import json, sys
d = json.load(open('$CREDS'))
tok = d.get('claudeAiOauth', {}).get('accessToken', '')
if not tok:
print('MISSING', file=sys.stderr)
sys.exit(1)
print(tok)
")
# Test token against the API with a minimal request
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
-X POST https://api.anthropic.com/v1/messages \
-H "anthropic-version: 2023-06-01" \
-H "anthropic-beta: oauth-2025-04-20" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{"model":"claude-haiku-4-5-20251001","max_tokens":1,"messages":[{"role":"user","content":"hi"}]}')
if [[ "$HTTP_STATUS" == "200" ]]; then
echo "OK: token is valid (HTTP $HTTP_STATUS)"
if [[ -n "$RETRY_TASK" ]]; then
/workspace/claudomator/scripts/ct-task "$RETRY_TASK" retry
fi
exit 0
elif [[ "$HTTP_STATUS" == "401" ]]; then
echo "EXPIRED: token rejected by API (HTTP 401)"
if [[ "$REFRESH" == "1" ]]; then
echo "Re-authenticating via claude CLI..."
claude --dangerously-skip-permissions /dev/null 2>&1 || true
# Check if creds were updated
NEW_TOKEN=$(python3 -c "import json; print(json.load(open('$CREDS')).get('claudeAiOauth',{}).get('accessToken',''))")
if [[ "$NEW_TOKEN" != "$ACCESS_TOKEN" ]]; then
echo "New token obtained. Syncing credentials..."
/workspace/claudomator/scripts/sync-credentials
if [[ -n "$RETRY_TASK" ]]; then
/workspace/claudomator/scripts/ct-task "$RETRY_TASK" retry
fi
exit 0
else
echo "Token unchanged — manual re-auth required: run 'claude' in a terminal" >&2
exit 1
fi
else
echo "Run: check-token --refresh or re-authenticate via 'claude'" >&2
exit 1
fi
else
echo "WARN: unexpected HTTP $HTTP_STATUS from API (token may still be valid)"
exit 1
fi
|
