github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-23 12:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

pairing: enforce strict account-scoped state

Browse Source
This commit is contained in:
Gustavo Madeira Santana
2026-02-26 00:31:24 -05:00
committed by Peter Steinberger
parent 4c560d0f41
commit 3bb94559d6
6 changed files with 152 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
docs/channels/pairing.md
View File

@@ -43,7 +43,14 @@ Supported channels: `telegram`, `whatsapp`, `signal`, `imessage`, `discord`, `sl
Stored under `~/.openclaw/credentials/`:
- Pending requests: `<channel>-pairing.json`
- Approved allowlist store: `<channel>-allowFrom.json`
- Approved allowlist store:
- Default account: `<channel>-allowFrom.json`
- Non-default account: `<channel>-<accountId>-allowFrom.json`
Account scoping behavior:
- Non-default accounts read/write only their scoped allowlist file.
- Default account uses the channel-scoped unscoped allowlist file.
Treat these as sensitive (they gate access to your assistant).