Skip to content

gateway.auth.mode=none breaks internal RPC probe with 1008 device identity required #67703

@xiew4589-lang

Description

@xiew4589-lang

Summary

When gateway.auth.mode is set to none, the Gateway's own internal RPC probe fails with:

gateway closed (1008): device identity required
RPC probe: failed

This causes a cascading failure chain:

  1. All exec approval followup dispatches timeout after 60s
  2. Frontend detects seq-gap → triggers websocket reconnect
  3. Reconnect pulls history from server, which may not have persisted the streaming assistant reply yet
  4. The reply appears to the user then disappears ("flash then vanish")

Expected behavior

auth.mode=none should still allow the Gateway's own internal RPC probe and followup dispatch to function, since these are internal operations that don't need external authentication.

Actual behavior

Internal RPC probe is rejected with 1008: device identity required, making the entire followup pipeline non-functional.

Workaround

Set gateway.auth.mode to token (which auto-generates a token). This immediately resolves the issue.

Environment

  • OpenClaw version: 2026.4.14
  • OS: macOS (Darwin 25.4.0, arm64)
  • Node: v25.5.0
  • Gateway: loopback binding (127.0.0.1:18789)

Logs

exec approval followup dispatch failed: gateway timeout after 60000ms
Gateway: unreachable (gateway closed (1008): device identity required)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions