Chat sign-in needs a live consent receipt; notice frozen as version 1 #59
2026-11-11
Migration clears ConsentReceipts: notice v1 was reused for new words
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Chat sign-in needs a live consent receipt; notice frozen as version 1
Meta's ruling 2026-11-11. The OIDC issuer (the chat tier) now requires a live receipt for TrainingNotice.Version: a refused authorize redirects to the consent page with the parked request as returnUrl; token and userinfo re-read the receipt; the back-channel reconciler ends sessions of accounts whose receipt is gone. Notice relabelled version 1 with a pinned hash; docs add a Before deploy step (clear ConsentReceipts), deploy and smoke notes. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>