Skip to content
CC Switch WikiUnofficial Community Wiki

Your access token could not be refreshed because your refresh token was already used - Codex

Quick fix

Upgrade CC Switch to v3.17.0 or later to fix official ChatGPT OAuth credential issues caused by the takeover route writing a placeholder.

Symptom

Section titled “Symptom”
Error output
Your access token could not be refreshed because your refresh token was already used. Please log out and sign in again.

Cause

Section titled “Cause”

In earlier versions, enabling Codex local route takeover wrote the `OPENAI_API_KEY = PROXY_MANAGED` placeholder to `auth.json`. When using the official ChatGPT subscription OAuth login, this could overwrite or corrupt existing credentials and cause refresh failures. If the takeover setting and backup were out of sync, the leftover placeholder could also be sent to the official endpoint, triggering a 401 error with `Incorrect API key provided: PROXY_MANAGED`.

The maintainer said that v3.17.0 refactored takeover routing for official ChatGPT sessions: it no longer writes the placeholder, preserves official login credentials, and removes leftover `PROXY_MANAGED`. A later comment reported a similar issue on v3.20.4, but with different error text. That comment provided no troubleshooting results, so it is unclear whether the root cause was the same or whether the fix applies to that version.

Fix

Section titled “Fix”

  1. Upgrade CC Switch to v3.17.0 or later, then verify the official Codex ChatGPT login and takeover scenarios again.

  2. If the issue persists after upgrading, provide reproduction steps, including the Provider used and the order in which you changed the takeover setting.

Affected Versions

Section titled “Affected Versions”
ToolCodex
Version3.14.1；评论另报告 v3.20.4 出现相似问题。维护者说明原问题自 v3.17.0 起修复。
PlatformsUnknown

Source Issues

Section titled “Source Issues”

This page is distilled from 1 real issues

FAQ

Section titled “FAQ”

(No FAQ yet)

Section titled “Related problems”
Login required: Claude Code login prompt after takeover with Codex OAuthUser-tested: after Claude takeover, keep ANTHROPIC_AUTH_TOKEN (even empty) in ~/.claude/settings.json env before starting Claude Code to avoid login prompts.1 issues mergedNo API key configured for provider: customUpgrade Codex CLI and CC Switch to the latest versions; CC Switch supports reading the Codex CLI version from config.toml.1 issues mergedunknown type: tool_search_call — Codex session continuation returns 400Do not resume a thread containing tool_search_call history; start a new Codex thread before using the Responses upstream.1 issues merged

This is an unofficial community wiki with no affiliation to the cc-switch authors or the project itself. Its content is compiled from the project's public GitHub issues. This site distributes no software.