claude-code - 💡(How to fix) Fix macOS keychain credentials not reused after auto-update — forces re-login on every version bump [1 comments, 2 participants]

TL;DR

The most likely fix is to re-grant the keychain ACL to the new binary on update or install to a stable non-versioned path to prevent the loss of OAuth credentials after auto-updates.

Guidance

• Verify the issue by checking the security find-generic-password output to confirm the keychain item is being replaced on each update.
• Consider setting DISABLE_AUTOUPDATER=1 in ~/.claude/settings.json and updating manually with claude update as a temporary workaround.
• To mitigate the issue, explore installing Claude Code to a stable, non-versioned path to maintain consistency in the keychain ACL.
• Investigate the possibility of programmatically re-granting the keychain ACL to the new binary on update to automate the process.

Example

No code snippet is provided as the issue does not require a specific code change but rather a change in installation path or update process.

Notes

The suggested fix assumes that re-granting the keychain ACL or installing to a non-versioned path will resolve the issue. However, the effectiveness of these solutions may depend on the specific implementation details of Claude Code and macOS keychain management.

Recommendation

Apply the workaround by setting DISABLE_AUTOUPDATER=1 and updating manually until a more permanent solution, such as installing to a stable path or automating ACL re-granting, can be implemented. This reason for this choice is to immediately prevent the loss of OAuth credentials while a more robust solution is developed.