Ayuriel/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(gateway): address PR review comments

Browse Source
This commit is contained in:
Cursor Agent 2026-03-19 16:51:24 +00:00
parent 7f0cfb98c7
commit 4d413b78eb
No known key found for this signature in database
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/gateway/probe.ts
View File

@ -50,9 +50,15 @@ export async function probeGateway(opts: {
// We used to disable identity for all local probes without token/password,
// but that breaks authenticated status checks when hardening is enabled.
//
// Now we only disable it for literal anonymous loopback probes (opts.auth
// undefined) to maintain legacy "no-setup" local status behavior.
return isLoopbackHost(hostname) && opts.auth === undefined;
// Disable device identity for loopback probes that are effectively
// unauthenticated: opts.auth undefined OR an auth object with no
// credentials. Callers like status/probe pass { token, password } from
// resolveGatewayProbeAuth even when both are missing; treat that as
// anonymous to preserve legacy "no-setup" local status behavior.
const hasCredentials =
(typeof opts.auth?.token === "string" && opts.auth.token.trim().length > 0) ||
(typeof opts.auth?.password === "string" && opts.auth.password.trim().length > 0);
return isLoopbackHost(hostname) && !hasCredentials;
} catch {
return false;
}

1
src/gateway/server/ws-connection/message-handler.ts
View File

@ -548,7 +548,6 @@ export function attachGatewayWsMessageHandler(params: {
if (!device && (!isControlUi || decision.kind !== "allow" || trustedProxyAuthOk)) {
clearUnboundScopes(grantReadForTokenAuth);
}
}
if (decision.kind === "allow") {
return true;
}