Skip to content

AND-159: prevent OpenClaw API key hash reuse - #834

Merged
yaojin3616 merged 1 commit into
mainfrom
agent/debugger/7ef42aba
Aug 7, 2026
Merged

AND-159: prevent OpenClaw API key hash reuse#834
yaojin3616 merged 1 commit into
mainfrom
agent/debugger/7ef42aba

Conversation

@yaojin3616

@yaojin3616 yaojin3616 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • stop serializing OpenClaw API key hashes to agent API responses
  • authenticate Gateway requests only by hashing the presented API key
  • show generated keys only for the current settings-page session

Verification

  • uv run --project . python -m pytest tests/test_gateway_runtime_a2a.py
  • npm run build (from frontend/)

Source: Feishu Base record recvrj5f1Nu9mu — Gateway returned api_key_hash to the frontend and accepted the digest as a credential.

@yaojin3616
yaojin3616 merged commit 3315e8e into main Aug 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant