[GH-ISSUE #147] [FEATURE]: Claude Pro - prevent 401 authentication error after resuming a paused run #47

Closed
opened 2026-02-27 07:20:09 +03:00 by kerem · 2 comments
Owner

Originally created by @meyerlor on GitHub (Feb 19, 2026).
Original GitHub issue: https://github.com/KeygraphHQ/shannon/issues/147

Problem description

I'm using Claude Pro without additional balance - therefore i need to wait always around ~5h for shannon to be able to continue once my included balance is burnt through.
Resuming the run is working in theory - but unfortunately, the "free" balance of Claude Pro is not enough to be able to reach the next "resume point" from where i could start shannon anew. This causes trouble because the run then falls into "hibernate" mode and is waiting for the next reset of Claude - but when reaching it Claude's OAuthToken is not valid anymore and the run will fail without reaching the next shannon phase.

Looking into Claude Code's .credential.json (from where i usually copy the access Token for shannon) i found the "refreshToken" - wouldn't it be possible for shannon to use this refresh token as well and request a new OAuth AccessToken?

Proposed solution

Use Claude Code's refreshToken to make sure it stays logged in while running a pentest with shannon

Originally created by @meyerlor on GitHub (Feb 19, 2026). Original GitHub issue: https://github.com/KeygraphHQ/shannon/issues/147 ### Problem description I'm using Claude Pro without additional balance - therefore i need to wait always around ~5h for shannon to be able to continue once my included balance is burnt through. Resuming the run is working in theory - but unfortunately, the "free" balance of Claude Pro is not enough to be able to reach the next "resume point" from where i could start shannon anew. This causes trouble because the run then falls into "hibernate" mode and is waiting for the next reset of Claude - but when reaching it Claude's OAuthToken is not valid anymore and the run will fail without reaching the next shannon phase. Looking into Claude Code's .credential.json (from where i usually copy the access Token for shannon) i found the "refreshToken" - wouldn't it be possible for shannon to use this refresh token as well and request a new OAuth AccessToken? ### Proposed solution Use Claude Code's refreshToken to make sure it stays logged in while running a pentest with shannon
kerem closed this issue 2026-02-27 07:20:09 +03:00
Author
Owner

@ezl-keygraph commented on GitHub (Feb 19, 2026):

@meyerlor

  • The oauth token in the credentials.json is short lived and needs a refresh in specific time intervals.
  • Instead you can use claude setup-token to get a long lived oauth token which doesn't need a refresh and will be valid for a year.
<!-- gh-comment-id:3925790766 --> @ezl-keygraph commented on GitHub (Feb 19, 2026): @meyerlor - The oauth token in the `credentials.json` is short lived and needs a refresh in specific time intervals. - Instead you can use `claude setup-token` to get a long lived oauth token which doesn't need a refresh and will be valid for a year.
Author
Owner

@meyerlor commented on GitHub (Feb 19, 2026):

oh god, many thanks. live saving!

<!-- gh-comment-id:3927479946 --> @meyerlor commented on GitHub (Feb 19, 2026): oh god, many thanks. live saving!
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/shannon-KeygraphHQ#47
No description provided.