Skip to content
claudewheel.auth
Updated Edit
On this page

Validate OAuth tokens against the Anthropic API and extract them from captured output.

#claudewheel.auth

#claudewheel.auth

Validate OAuth tokens against the Anthropic API and extract them from captured output.

#looks_like_token

python
def looks_like_token(token: str) -> bool

Cheap offline check: does token have the shape of an API token?

Anchors on the sk-ant- prefix with at least one trailing token character. Never makes a network call -- callers use it to reject garbage before spending a round-trip on :func:validate_token.

#validate_token

python
def validate_token(token: str, timeout: float=5.0) -> str

Probe the Anthropic API with the token; return one of the four states.

Never logs, prints, or embeds the token in any raised exception.

#extract_token

python
def extract_token(captured: bytes) -> str | None

Scrape an OAuth token from raw PTY-captured terminal output.

Strips terminal escape sequences, joins lines (to defeat hard-wrapping mid-token), anchors the search after the last "valid for 1 year" label when present (Ink re-renders frames; the last frame wins), and applies a length sanity check. Returns the best candidate or None.

#_best_candidate

python
def _best_candidate(data: bytes) -> str | None

Pick the best token-looking match in data, or None.

More tools from this site

  • claudestream Drive Claude Code from Python: run it as a subprocess and read its output as typed events, with async and sync sessions, sandbox policies, and tools you define in Python
  • dirstat Fast, single-binary directory statistics CLI: every file under a tree grouped by format, with counts, sizes, and lines of code, as a colored terminal table or as JSON
  • fastware A batteries-included ASGI framework: msgspec JSON, a managed Granian server, dependency injection, SSE, WebSockets, auth, and a test client
  • go-toml-edit Zero-dep TOML editing library for Go with comment preservation
  • howmuchleft The fastest Claude Code statusline: context window, 5-hour, and weekly limit usage as three customizable gradient bars, rendering in about 6 ms
  • orxtra
  • pgdesign
  • predraw Declarative rendering pipeline: describe a scene in JSON and get SVG, PNG and WebP out, with light and dark style tokens, reusable components and text converted to path outlines
  • reposummary Turn a git repository's history into a Markdown journal: pick a time window or revision range and get a readable digest of what changed, optionally narrated by an LLM
  • rlsbl Release orchestration and project scaffolding CLI that bumps versions, validates a structured JSONL changelog, tags only the commit CI verified, and publishes to npm, PyPI, Go and more
  • safegit git wrapper CLI that gives each commit its own temporary index and retries ref updates on conflict, so concurrent agents share one repository
  • saferm Command-line replacement for rm that archives every deletion with a mandatory reason and the context it ran in, so deleted files can be listed, inspected and restored
  • selfdoc Static Site Generator that builds a project's documentation site directly from its source code, so the docs can never drift from the code they describe, with SEO/AEO, first-class blog, search, and cross-project linking built in
  • strictcli
  • stricttest An always-on test-isolation floor: a pytest plugin and a Go env-hygiene module that make a test suite structurally unable to reach real credentials, the real HOME, the network, or the development repository.
  • wesktop A Python framework that turns an ASGI web app into a desktop application, serving it from a local Granian server and displaying it in a native OS window via pywebview
Search