5549fc3672
Each workstation user needs a continuously valid Claude token under their own Enterprise identity. Store only that user's OAuth state in an isolated Vault path, renew and verify it automatically, recover from Vault when possible, and alert when interactive SSO is required.
12 lines
226 B
SYSTEMD
12 lines
226 B
SYSTEMD
[Unit]
|
|
Description=Keep Claude OAuth credentials valid and recoverable for %i
|
|
|
|
[Timer]
|
|
OnBootSec=10m
|
|
OnUnitActiveSec=6h
|
|
Persistent=true
|
|
RandomizedDelaySec=10m
|
|
Unit=claude-auth-sync@%i.service
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|