fix(gateway): skip operator pairing on valid shared auth

This commit is contained in:
Peter Steinberger
2026-02-22 19:22:37 +01:00
parent 9da5f9819b
commit b13bba9c35
2 changed files with 83 additions and 101 deletions

View File

@@ -542,7 +542,13 @@ export function attachGatewayWsMessageHandler(params: {
return;
}
const skipPairing = shouldSkipControlUiPairing(controlUiAuthPolicy, sharedAuthOk);
// Shared token/password auth is already gateway-level trust for operator clients.
// In that case, don't force device pairing on first connect.
const skipPairingForOperatorSharedAuth =
role === "operator" && sharedAuthOk && !isControlUi && !isWebchat;
const skipPairing =
shouldSkipControlUiPairing(controlUiAuthPolicy, sharedAuthOk) ||
skipPairingForOperatorSharedAuth;
if (device && devicePublicKey && !skipPairing) {
const formatAuditList = (items: string[] | undefined): string => {
if (!items || items.length === 0) {