github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-10 18:24:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Daemon CLI: resolve token drift from gateway credentials

Browse Source
This commit is contained in:
Vincent Koc
2026-03-07 16:02:18 -08:00
parent 936f0a7f22
commit c5fb661742
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/cli/daemon-cli/lifecycle-core.ts
View File

@@ -5,7 +5,10 @@ import { checkTokenDrift } from "../../daemon/service-audit.js";
import type { GatewayService } from "../../daemon/service.js"; import type { GatewayService } from "../../daemon/service.js";
import { renderSystemdUnavailableHints } from "../../daemon/systemd-hints.js"; import { renderSystemdUnavailableHints } from "../../daemon/systemd-hints.js";
import { isSystemdUserServiceAvailable } from "../../daemon/systemd.js"; import { isSystemdUserServiceAvailable } from "../../daemon/systemd.js";
import { isGatewaySecretRefUnavailableError } from "../../gateway/credentials.js"; import {
isGatewaySecretRefUnavailableError,
resolveGatewayCredentialsFromConfig,
} from "../../gateway/credentials.js";
import { isWSL } from "../../infra/wsl.js"; import { isWSL } from "../../infra/wsl.js";
import { defaultRuntime } from "../../runtime.js"; import { defaultRuntime } from "../../runtime.js";
import { import {
@@ -281,7 +284,11 @@ export async function runServiceRestart(params: {
const command = await params.service.readCommand(process.env); const command = await params.service.readCommand(process.env);
const serviceToken = command?.environment?.OPENCLAW_GATEWAY_TOKEN; const serviceToken = command?.environment?.OPENCLAW_GATEWAY_TOKEN;
const cfg = loadConfig(); const cfg = loadConfig();
const configToken = cfg.gateway?.auth?.token?.trim() || undefined; const configToken = resolveGatewayCredentialsFromConfig({
cfg,
env: process.env,
modeOverride: "local",
}).token;
const driftIssue = checkTokenDrift({ serviceToken, configToken }); const driftIssue = checkTokenDrift({ serviceToken, configToken });
if (driftIssue) { if (driftIssue) {
const warning = driftIssue.detail const warning = driftIssue.detail