anthropics / anthropics/claude-code-action
OIDC App token exchange returning 500 Internal Server Error since Mar 18 12:00 UTC
- Dominant language
- TypeScript
- Stars
- 8.9k
- Forks
- 2.1k
- Avg merge
- 3d 9h
- Merged PRs (30d)
- 10
Description
## Problem
All `claude-code-action` workflows using `claude_code_oauth_token` have been failing since approximately **2026-03-18 12:00 UTC** with:
```
App token exchange failed: 500 Internal Server Error - Internal server error
Retrying in 5 seconds...
Attempt 1 failed: Internal server error
...
Operation failed after 3 attempts
```
This affects all three retry attempts. The action never reaches Claude execution.
## Impact
- All PR-triggered workflows using `claude_code_oauth_token` are broken
- Issue comment workflows (`@claude`) are also affected
- This has been ongoing for **7+ hours** with no recovery
## Reproduction
Any workflow using:
```yaml
- uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
```
Fails immediately at OIDC token exchange.
## Environment
- Repository: `oviva-ag/claude-code-plugin`
- Action version: `anthropics/claude-code-action@v1` (SHA: 1b422b3517b51140e4484faab676c5e68b914866)
- Coincides with Anthropic status page incident: "Elevated errors on Opus 4.6" reported at 12:30 UTC
## Example failed runs
- https://github.com/oviva-ag/claude-code-plugin/actions/runs/23263904494
- https://github.com/oviva-ag/claude-code-plugin/actions/runs/23247230397
- https://github.com/oviva-ag/claude-code-plugin/actions/runs/23244292276
Contributor guide
Research direction
Start by running the workflow shown in the reproduction section and inspect the linked failed runs around the OIDC token exchange. Confirm whether the exchange still returns HTTP 500 and compare the behavior with the cited Anthropic status incident. Done means workflows using claude_code_oauth_token complete token exchange and reach Claude execution.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, typescript
- Domain
- authentication, ci-cd
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100