Files
openclaw-zero-token/gateway/auth-mode-policy.ts
sjhu 571e14a236 feat: upgrade to upstream v2026.3.28
Major upgrade from e26988a38 to upstream v2026.3.28 (f9b107928).
Key changes:
- Upstream src/, ui/, extensions/ (89 bundled extensions)
- Zero-token web providers preserved in src/zero-token/
- AskOnce plugin restored and registered as CLI command
- Added missing packages: @anthropic-ai/vertex-sdk, @modelcontextprotocol/sdk
- Fixed tsconfig rootDir, skipLibCheck for plugin-sdk DTS build
- Added askonce to bundled plugin metadata and package.json exports
- Fixed AskOnce CLI command registration (missing commands metadata)
- Restored AskOnce adapter imports (correct 5-level relative paths)
- Removed stale migration artifacts from root directory
2026-03-30 17:58:12 +08:00

27 lines
1.0 KiB
TypeScript

import type { OpenClawConfig } from "../config/config.js";
import { hasConfiguredSecretInput } from "../config/types.secrets.js";
export const EXPLICIT_GATEWAY_AUTH_MODE_REQUIRED_ERROR =
"Invalid config: gateway.auth.token and gateway.auth.password are both configured, but gateway.auth.mode is unset. Set gateway.auth.mode to token or password.";
export function hasAmbiguousGatewayAuthModeConfig(cfg: OpenClawConfig): boolean {
const auth = cfg.gateway?.auth;
if (!auth) {
return false;
}
if (typeof auth.mode === "string" && auth.mode.trim().length > 0) {
return false;
}
const defaults = cfg.secrets?.defaults;
const tokenConfigured = hasConfiguredSecretInput(auth.token, defaults);
const passwordConfigured = hasConfiguredSecretInput(auth.password, defaults);
return tokenConfigured && passwordConfigured;
}
export function assertExplicitGatewayAuthModeWhenBothConfigured(cfg: OpenClawConfig): void {
if (!hasAmbiguousGatewayAuthModeConfig(cfg)) {
return;
}
throw new Error(EXPLICIT_GATEWAY_AUTH_MODE_REQUIRED_ERROR);
}