@dst-justin/relay 2.2.1 → 2.2.3

package/README.md

@@ -223,6 +223,9 @@ Sessions live in `~/.claude/projects/` and are shared across all accounts — af
 
 ## Changelog
 
+### v2.2.2 — 2026-06-28
+- Fix OAuth token refresh: use correct endpoint (`/v1/oauth/token`), required `client_id`, and `anthropic-version: oauth-2025-04-20` header — `relay refresh-all` now works
+
 ### v2.2.0 — 2026-06-28
 - Silent OAuth auto-refresh: `relay list` and `relay status` now silently refresh expired tokens using the stored `refreshToken` — no browser login needed for routine expiry
 - Pre-emptive refresh: tokens are refreshed 5 minutes before expiry, not just after

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dst-justin/relay",
-  "version": "2.2.1",
+  "version": "2.2.3",
   "description": "Multi-account switcher for Claude Code — instant credential swap across macOS, Linux, and Windows",
   "bin": {
     "relay": "./relay.js"

package/relay

@@ -187,11 +187,11 @@ def try_refresh(name, cred_path):
         refresh_tok = oauth.get('refreshToken', '')
         if not refresh_tok:
             return None
-        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': refresh_tok}).encode()
+        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': refresh_tok, 'client_id': '9d1c250a-e61b-44d9-88ed-5944d1962f5e'}).encode()
         req = urllib.request.Request(
-            'https://api.anthropic.com/token',
+            'https://api.anthropic.com/v1/oauth/token',
             data=params,
-            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0'})
+            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0', 'anthropic-version': 'oauth-2025-04-20'})
         with urllib.request.urlopen(req, timeout=10) as r:
             resp = json.loads(r.read())
         oauth['accessToken'] = resp['access_token']
@@ -425,9 +425,9 @@ def _try_refresh(cred_path):
         rt = oauth2.get('refreshToken', '')
         if not rt:
             return None
-        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt}).encode()
-        req2 = urllib.request.Request('https://api.anthropic.com/token', data=params,
-            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0'})
+        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt, 'client_id': '9d1c250a-e61b-44d9-88ed-5944d1962f5e'}).encode()
+        req2 = urllib.request.Request('https://api.anthropic.com/v1/oauth/token', data=params,
+            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0', 'anthropic-version': 'oauth-2025-04-20'})
         with urllib.request.urlopen(req2, timeout=10) as r2:
             resp = json.loads(r2.read())
         oauth2['accessToken'] = resp['access_token']
@@ -632,9 +632,9 @@ def try_refresh(name, cred_path):
         rt = oauth.get('refreshToken', '')
         if not rt:
             return None
-        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt}).encode()
-        req = urllib.request.Request('https://api.anthropic.com/token', data=params,
-            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0'})
+        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt, 'client_id': '9d1c250a-e61b-44d9-88ed-5944d1962f5e'}).encode()
+        req = urllib.request.Request('https://api.anthropic.com/v1/oauth/token', data=params,
+            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0', 'anthropic-version': 'oauth-2025-04-20'})
         with urllib.request.urlopen(req, timeout=10) as r:
             resp = json.loads(r.read())
         oauth['accessToken'] = resp['access_token']
@@ -880,9 +880,9 @@ def try_refresh_daemon(name, cred_path):
         if not rt:
             return None
         import urllib.parse
-        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt}).encode()
-        req = urllib.request.Request('https://api.anthropic.com/token', data=params,
-            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0'})
+        params = urllib.parse.urlencode({'grant_type': 'refresh_token', 'refresh_token': rt, 'client_id': '9d1c250a-e61b-44d9-88ed-5944d1962f5e'}).encode()
+        req = urllib.request.Request('https://api.anthropic.com/v1/oauth/token', data=params,
+            headers={'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'relay/2.0', 'anthropic-version': 'oauth-2025-04-20'})
         with urllib.request.urlopen(req, timeout=10) as r:
             resp = json.loads(r.read())
         oauth['accessToken'] = resp['access_token']

package/relay.ps1

@@ -127,10 +127,10 @@ function Invoke-TokenRefresh($credPath) {
         $oauth = $d.claudeAiOauth
         $rt    = $oauth.refreshToken
         if (-not $rt) { return $null }
-        $body  = "grant_type=refresh_token&refresh_token=$([System.Uri]::EscapeDataString($rt))"
-        $resp  = Invoke-RestMethod "https://api.anthropic.com/token" -Method Post `
+        $body  = "grant_type=refresh_token&refresh_token=$([System.Uri]::EscapeDataString($rt))&client_id=9d1c250a-e61b-44d9-88ed-5944d1962f5e"
+        $resp  = Invoke-RestMethod "https://api.anthropic.com/v1/oauth/token" -Method Post `
                      -Body $body -ContentType "application/x-www-form-urlencoded" `
-                     -Headers @{ "User-Agent" = "relay/2.0" } -TimeoutSec 10
+                     -Headers @{ "User-Agent" = "relay/2.0"; "anthropic-version" = "oauth-2025-04-20" } -TimeoutSec 10
         $oauth.accessToken = $resp.access_token
         if ($resp.refresh_token) { $oauth.refreshToken = $resp.refresh_token }
         $expiresMs = [System.DateTimeOffset]::UtcNow.ToUnixTimeMilliseconds() + ($resp.expires_in ?? 3600) * 1000