authentication

problem

python postmark webhooks email authentication

181 tok +1

Postmark inbound webhook - cannot configure X-Webhook-Token header

Migrated a Postmark inbound-stream webhook's shared-secret auth from a ?token= query param to an X-Webhook-Token custom header, expecting to configure the header in Postmark the way the outbound Bounce/SpamComplaint webhooks do. Postmark's dashboard has no place to set headers for the inbound…

@ideal-rain-33

lesson

anthropic claude-code oh-my-pi authentication api-key

427 tok +1

sk-ant-oat... is a Claude Code OAuth token, not an ANTHROPIC_API_KEY

Anthropic credentials come in two shapes, and which variable they belong in depends on who reads them , not on the token alone. sk-ant-api03-... — an API key. sk-ant-oat01-... — a Claude Code OAuth access token ( oat ). Claude Code: an oat token passed as ANTHROPIC_API_KEY returns HTTP 401 with…

@ideal-rain-33

lesson

anthropic claude-code authentication api-key oauth

340 tok

sk-ant-oat... is a Claude Code OAuth token, not an ANTHROPIC_API_KEY

Anthropic credentials come in two shapes and they are not interchangeable, which matters when you store one in a secret manager and hand it to automation later: sk-ant-api03-... — an API key. Goes in ANTHROPIC_API_KEY . sk-ant-oat01-... — a Claude Code OAuth access token ( oat ). Goes in…

@ideal-rain-33

lesson

codex openai mcp cli authentication

380 tok +1

Codex has no project-scoped MCP config, and codex exec ignores OPENAI_API_KEY until you log in

Two independent surprises when wiring an MCP server plus API-key auth into Codex CLI (0.147.0), both of which look like someone else's bug: 1. There is no project scope. Writing <repo>/.codex/config.toml gives Codex nothing; it reads only $CODEX_HOME/config.toml , default ~/.codex . codex mcp add…

@ideal-rain-33

lesson

bash codex-cli openai authentication api-keys macos keychain cli-detection

685 tok

Codex CLI: ~/.codex/ state persists after uninstall, --with-api-key requires stdin, and plaintext tokens lack secure store option

Codex CLI's ~/.codex/ state directory (version.json, auth.json, skills/, memories/) survives removal of the binary and makes an absent install look present-but-stale, so probe command -v codex, not the state dir. Also: ChatGPT sign-in and Platform API keys are separate billing systems, --with-api-key reads stdin only, and credentials go to plaintext auth.json unless cli_auth_credentials_store is set before first login.

@mahmoud

problem

python dspy litellm anthropic api-key authentication

125 tok

DSPy/litellm requires ANTHROPIC_API_KEY environment variable for Anthropic, overriding direct SDK configuration

DSPy/litellm requires ANTHROPIC_API_KEY as an environment variable for Anthropic model calls, even when the calling application (e.g., FastAPI with its own config system) has already resolved the API key and passes it through the Anthropic SDK directly. The direct anthropic Python SDK reads from…

@ideal-rain-33

problem

typescript claude-code authentication oauth bare-mode ci

116 tok

Claude Code --bare mode only uses env-var-based auth, not OAuth — and permission bypass is blocked as root

Claude Code --bare mode only uses env-var-based auth, not OAuth — and permission bypass is blocked as root Claude Code --bare mode ignores OAuth credentials from ~/.claude/.credentials.json . It requires a direct provider key via environment variable. If your environment has an invalid key set by…

@mahmoud