Nick Taylor c37081e612 feat(gateway): implement trusted-proxy auth logic ...

- Add 'trusted-proxy' to ResolvedGatewayAuthMode
- Add trustedProxy field to ResolvedGatewayAuth
- Add authorizeTrustedProxy() helper function
- Update authorizeGatewayConnect() to handle trusted-proxy mode
- Validate proxy source IP against trustedProxies list
- Support required headers and user allowlist validation

Part of #1560

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-02-14 12:26:01 +01:00

..

acp

fix: ensure CLI exits after command completion (#12906)

2026-02-14 00:34:33 +01:00

agents

test: increase live-model retry token budget for reasoning-first providers

2026-02-14 12:23:51 +01:00

auto-reply

fix: update remaining replyToMode "first" defaults to "off"

2026-02-13 23:31:17 -08:00

browser

test(browser): add tests for trusted-proxy auto-token prevention

2026-02-14 12:26:01 +01:00

canvas-host

perf(test): trim browser smoke and speed canvas test reload

2026-02-14 01:47:47 +00:00

channels

fix: update remaining replyToMode "first" defaults to "off"

2026-02-13 23:31:17 -08:00

cli

fix(gateway-cli): allow lan binding with trusted-proxy in CLI startup

2026-02-14 12:26:01 +01:00

commands

test(cli): add tests for trusted-proxy auth configuration

2026-02-14 12:26:01 +01:00

compat

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

config

feat(gateway): add trusted-proxy auth mode types and schema

2026-02-14 12:26:01 +01:00

cron

chore(test): fix cron every-jobs-fire unused import

2026-02-14 04:57:28 +00:00

daemon

fix(daemon): preserve backslashes in parseCommandLine on Windows (#15642)

2026-02-13 19:27:06 +01:00

discord

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

docs

Docs: landing page revamp (#8885)

2026-02-04 10:37:14 -05:00

gateway

feat(gateway): implement trusted-proxy auth logic

2026-02-14 12:26:01 +01:00

hooks

fix(hooks): replace console logging with proper subsystem logging in loader (openclaw#11029) thanks @shadril238

2026-02-13 18:21:11 -06:00

imessage

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

infra

perf(test): remove slow port inspection and reconnect sleeps

2026-02-14 04:57:28 +00:00

line

refactor(line): split flex template builders

2026-02-13 19:08:37 +00:00

link-understanding

fix(security): block private/loopback/metadata IPs in link-understanding URL detection (#15604)

2026-02-13 18:38:40 +01:00

logging

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

macos

refactor: unify gateway restart deferral and dispatcher cleanup

2026-02-14 00:38:18 +01:00

markdown

feat(telegram): render blockquotes as native <blockquote> tags (#14608) (#14626)

2026-02-12 08:11:57 -05:00

media

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

media-understanding

refactor(media): extract runner entry execution helpers

2026-02-13 19:08:37 +00:00

memory

fix(memory): default qmd searchMode to search + scope search/vsearch to collections

2026-02-13 23:14:34 -08:00

node-host

refactor(node-host): extract invoke handlers

2026-02-13 19:08:37 +00:00

pairing

perf: replace proper-lockfile with lightweight file locks

2026-02-13 17:57:30 +00:00

plugin-sdk

fix(security): enforce bounded webhook body handling

2026-02-13 19:14:54 +01:00

plugins

fix: dedupe before_tool_call in embedded runtime (#15635) (thanks @lailoo)

2026-02-14 02:50:35 +01:00

process

perf(test): trim duplicate gateway and auto-reply test overhead

2026-02-13 23:40:38 +00:00

providers

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

routing

refactor(routing): normalize binding matching and harden qmd boot-update tests

2026-02-14 03:40:28 +01:00

scripts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

security

test(security): add trusted-proxy audit tests

2026-02-14 12:26:01 +01:00

sessions

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

shared/text

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

signal

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

slack

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

telegram

fix(telegram): change default replyToMode from "first" to "off"

2026-02-13 23:31:17 -08:00

terminal

fix(onboarding): exit cleanly after web ui hatch

2026-02-13 03:20:32 +01:00

test-helpers

fix: use STATE_DIR instead of hardcoded ~/.openclaw for identity and canvas (#4824)

2026-02-07 22:16:59 -05:00

test-utils

perf(test): reduce hot-suite import and setup overhead

2026-02-13 20:26:39 +00:00

tts

refactor(tts): extract directives and provider core

2026-02-13 19:08:37 +00:00

tui

perf(test): reduce import and fixture overhead in hot tests

2026-02-14 02:49:19 +00:00

types

fix: update pi packages to 0.51.0, remove bogus type augmentation

2026-02-02 01:52:33 +01:00

utils

fix: use relayAbort helper for addEventListener to preserve AbortError reason

2026-02-13 18:13:18 +01:00

web

perf(test): remove last-route polling in partial reply gating

2026-02-14 04:57:28 +00:00

whatsapp

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

wizard

fix(configure): reject literal "undefined" and "null" gateway auth tokens (#13767)

2026-02-13 17:04:41 +01:00

channel-web.barrel.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

channel-web.ts

refactor!: rename chat providers to channels

2026-01-13 08:40:39 +00:00

docker-setup.test.ts

perf(test): speed up hot test files

2026-02-14 02:55:39 +00:00

entry.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

extensionAPI.ts

chore: Migrate to tsdown, speed up JS bundling by ~10x (thanks @hyf0).

2026-02-03 20:18:16 +09:00

globals.test.ts

…

globals.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

index.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

index.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logger.test.ts

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

logger.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

logging.ts

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

polls.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

polls.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

runtime.ts

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

utils.test.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

utils.ts

Deduplicate more

2026-02-09 18:56:58 -08:00

version.test.ts

fix: CLI harden update restart imports and fix nested bundle version resolution

2026-02-06 00:09:48 -05:00

version.ts

fix: CLI harden update restart imports and fix nested bundle version resolution

2026-02-06 00:09:48 -05:00