feat(security): externalize gateway auth token from openclaw.json - #2378

Merged

ericksoa merged 14 commits into

mainfrom

feat/externalize-gateway-token

Apr 24, 2026

Commits on Apr 23, 2026

feat(security): externalize gateway auth token from openclaw.json

ericksoa
and
claude
committed
6ea9871
Merge branch 'main' into feat/externalize-gateway-token
ericksoa
authored
f055fba
fix(security): search recursively for downloaded gateway-token file

ericksoa
and
claude
committed
2f56b07
Merge branch 'main' into feat/externalize-gateway-token
ericksoa
authored
073b52c
fix(security): clear auto-generated token after openclaw doctor

ericksoa
and
claude
committed
f136714
fix(security): generate gateway token in non-root mode

ericksoa
and
claude
committed
7dc0a72
fix: apply CodeRabbit auto-fixes

coderabbitai[bot]
and
CodeRabbit
authored
03c1589
fix(security): use kubectl exec to read gateway token from sandbox

ericksoa
and
claude
committed
98423b0

Commits on Apr 24, 2026

fix(security): stop writing token file and exporting env in non-root mode

ericksoa
and
claude
committed
92fd0a4
fix(security): write non-root token file with 0400 permissions

ericksoa
and
claude
committed
537fe9a
fix(onboard): add non-root token path to host-side retrieval

ericksoa
and
claude
committed
a4ae27e
docs(security): document dual-path token file layout

ericksoa
and
claude
committed
379eb5b
test(security): add gateway token security regression tests

ericksoa
and
claude
committed
1c5126c
fix: resolve merge conflicts with main — keep both token externalization and Slack guard

ericksoa
and
claude
committed
702a794