Files
claudechecker/RELEASE_NOTES.md
T
superdooper86 ac7ffe81af fix: use WebView JS fetch for auth detection; send all cookies to API
Cookie domain filtering was wrong — the session token domain is unknown
and was never found by claude.ai/anthropic.com filters.

LoginView: replace getAllCookies domain check with callAsyncJavaScript
that fetches /api/bootstrap directly from the WebView. The WebView uses
its own full session (all cookies, any domain) so auth is detected
correctly regardless of where the token lives.

UsageViewModel: claudeCookieHeader now sends all cookies from the app's
WKWebsiteDataStore instead of filtering by domain. checkInitialSignInState
likewise checks for any cookie.
2026-05-11 10:06:33 +02:00

1.2 KiB

What's new in v1.2.1

Bug fixes

  • Fixed "Not signed in" showing incorrectly on launch when the session was already active
  • Sign-in state is now detected immediately from stored cookies on startup, before the first data refresh completes
  • Fixed login window auto-closing before the user could sign in — the login window now correctly loads the /login page so it only detects auth after the actual sign-in redirect
  • Fixed "No API key configured" showing after signing out — now correctly shows "Not signed in" with a prompt to sign in
  • Added /api/organizations as a final fallback for org ID resolution when the bootstrap API response doesn't include it
  • Fixed usage data not loading — API requests now include required browser-like headers (Origin, Referer, User-Agent)
  • Fixed Settings incorrectly showing "Signed in" after a failed refresh — sign-in state now resets when authentication fails
  • Rewrote login detection to use the WebView's own fetch call instead of inspecting cookie domains — correctly detects auth regardless of which domain the session token is stored on
  • Fixed API requests not including session cookies — now sends all cookies from the app's WebView store rather than filtering by domain