taodeng/ocp
1
0
Fork 0
mirror of https://github.com/dtzp555-max/ocp.git synced 2026-07-21 21:15:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(usage): send OAuth Bearer + anthropic-beta header for /v1/messages probe

Browse Source 
Follow-up to #21. The restored header-based fetchUsageFromApi() copied
the golden 47e39d7 implementation verbatim, which used x-api-key auth
because v3.0.0 targeted API-key users (sk-ant-api03-*). Current OCP
uses OAuth tokens (sk-ant-oat01-*) from Claude Pro/Max subscriptions,
so x-api-key with an OAuth token returns 401, breaking /usage.

Claude Code cli.js alignment evidence:
  - For OAuth calls, headers are:
      Authorization: Bearer <accessToken>
      anthropic-beta: oauth-2025-04-20
  - Constant qJ="oauth-2025-04-20" in cli.js
  - Multiple call sites confirmed (e.g. /v1/files upload, /v1/sessions)

Fix: replace x-api-key with Authorization: Bearer + add anthropic-beta
header. Matches the exact headers cli.js sends for every OAuth request.

ALIGNMENT.md compliance: change aligns OCP with cli.js; CI blacklist
unaffected.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Oracle Public Cloud User
2026-04-20 03:20:33 +00:00
co-authored by Claude Opus 4.6
parent 6bfffd2cba
commit 01e260ce17
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server.mjs
+2 -1
View File
@@ -810,8 +810,9 @@ async function fetchUsageFromApi() {
const doFetch = (bearerToken) => fetch("https://api.anthropic.com/v1/messages", { const doFetch = (bearerToken) => fetch("https://api.anthropic.com/v1/messages", {
method: "POST", method: "POST",
headers: { headers: {
"x-api-key": bearerToken, "Authorization": `Bearer ${bearerToken}`,
"anthropic-version": "2023-06-01", "anthropic-version": "2023-06-01",
"anthropic-beta": "oauth-2025-04-20",
"Content-Type": "application/json", "Content-Type": "application/json",
}, },
body, body,