7b18bd03bb
fix(gateway): allow explicit loopback trusted proxy auth
...
Fixes #59167 .
Supersedes #63379 .
2026-04-27 22:01:06 -07:00
1042b893f6
docs: drop parenthetical H1s across gateway, channels, providers, concepts, and reference pages
2026-04-24 10:49:23 -07:00
627c19c5cb
docs: add Related sections to remaining CLI, gateway API, and help pages
2026-04-23 20:41:35 -07:00
14c4143723
docs: clarify OpenAI GPT-5.5 auth routes
2026-04-23 23:49:17 +01:00
2777b089b5
docs: normalize frontmatter titles to sentence case
2026-04-23 13:15:17 -07:00
89051c6bf6
docs(openai): document GPT-5.5 defaults
2026-04-23 20:19:15 +01:00
9ac9edff43
docs: refresh gateway operator scope refs
2026-04-04 15:25:57 +01:00
6cff644dc9
docs: refresh http endpoint auth refs
2026-04-04 13:56:08 +01:00
7671f4f1e3
docs: clarify gateway and plugin http auth scopes
2026-04-04 09:01:05 +01:00
0633406ff6
fix(gateway): restore compat HTTP operator auth
2026-03-31 16:49:30 +09:00
39ad51426c
test: add Open WebUI docker smoke
2026-03-25 05:28:51 -07:00
d10669629d
feat(gateway): make openai compatibility agent-first
2026-03-24 18:06:24 -07:00
eaad4ad1be
feat(gateway): add missing OpenAI-compatible endpoints (models and embeddings) ( #53992 )
...
* feat(gateway): add OpenAI-compatible models and embeddings
* docs(gateway): clarify model list and agent routing
* Update index.md
* fix(gateway): harden embeddings HTTP provider selection
* fix(gateway): validate compat model overrides
* fix(gateway): harden embeddings and response continuity
* fix(gateway): restore compat model id handling
2026-03-24 16:53:51 -07:00
729ee165ed
docs(gateway): clarify trusted operator HTTP endpoints
2026-03-07 18:48:17 +00:00
58659b931b
fix(gateway): enforce owner boundary for agent runs
2026-03-02 00:27:44 +00:00
30b6eccae5
feat(gateway): add auth rate-limiting & brute-force protection ( #15035 )
...
* feat(gateway): add auth rate-limiting & brute-force protection
Add a per-IP sliding-window rate limiter to Gateway authentication
endpoints (HTTP, WebSocket upgrade, and WS message-level auth).
When gateway.auth.rateLimit is configured, failed auth attempts are
tracked per client IP. Once the threshold is exceeded within the
sliding window, further attempts are blocked with HTTP 429 + Retry-After
until the lockout period expires. Loopback addresses are exempt by
default so local CLI sessions are never locked out.
The limiter is only created when explicitly configured (undefined
otherwise), keeping the feature fully opt-in and backward-compatible.
* fix(gateway): isolate auth rate-limit scopes and normalize 429 responses
---------
Co-authored-by: buerbaumer <buerbaumer@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-02-13 15:32:38 +01:00
abcaa8c7a9
Docs: add nav titles across docs ( #5689 )
2026-01-31 15:04:03 -06:00
8cab78abbc
chore: Run pnpm format:fix.
2026-01-31 21:13:13 +09:00
9a7160786a
refactor: rename to openclaw
2026-01-30 03:16:21 +01:00
6d16a658e5
refactor: rename clawdbot to moltbot with legacy compat
2026-01-27 12:21:02 +00:00
1c257f170a
Gateway: disable OpenAI HTTP chat completions by default ( #686 )
...
* feat(gateway): disable OpenAI chat completions HTTP by default
* test(gateway): deflake mock OpenAI tool-calling
* docs(changelog): note OpenAI HTTP endpoint default-off
2026-01-10 21:55:54 +00:00
56b11ad5a8
docs(gateway): rename OpenAI HTTP endpoint doc
2026-01-10 22:39:06 +01:00
1110d96769
feat(gateway): add config toggle for chat completions endpoint
2026-01-10 22:39:06 +01:00
6546a1a23a
feat(gateway): allow agent via model
2026-01-10 22:11:12 +01:00
dafa8a2881
feat(gateway): add OpenAI-compatible HTTP endpoint
2026-01-10 22:11:04 +01:00
Vincent Koc