viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Add per-user Claude auth renewal

Browse source 
Each workstation user needs a continuously valid Claude token under their own Enterprise identity. Store only that user's OAuth state in an isolated Vault path, renew and verify it automatically, recover from Vault when possible, and alert when interactive SSO is required.
This commit is contained in:
Viktor Barzin 2026-06-20 20:10:40 +00:00
parent 834c5e6a2a
commit 5549fc3672
11 changed files with 408 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

12
scripts/claude-auth-sync@.timer Normal file
View file

@ -0,0 +1,12 @@
[Unit]
Description=Keep Claude OAuth credentials valid and recoverable for %i
[Timer]
OnBootSec=10m
OnUnitActiveSec=6h
Persistent=true
RandomizedDelaySec=10m
Unit=claude-auth-sync@%i.service
[Install]
WantedBy=timers.target