fix(gateway): allow health method for all authenticated roles#19699

Merged

mbelinky merged 1 commit intoopenclaw:mainfrom

Nachx639:fix/gateway-health-role-auth

Feb 20, 2026

Contributor

Nachx639 commented Feb 18, 2026 •

edited by greptile-apps bot

Loading

Summary

authorizeGatewayMethod rejects health calls from connections with role node or operator without admin scope
Paired devices (macOS/iOS apps) connect as role node and spam unauthorized role: node errors on every health check, flooding the gateway log and breaking node<->gateway communication
Fix: add early return for method === "health" before role checks — health is a read-only status probe and should be allowed for any authenticated connection

Reproduction

Pair a macOS app with the gateway
The app connects with role node and periodically sends health RPC
Gateway rejects every health call → log floods with unauthorized role: node
App shows "thinking..." but never receives replies

Test plan

Verify paired macOS/iOS node can successfully call health
Verify health no longer produces unauthorized role log spam
Verify role restrictions still apply to other methods (send, agent, etc.)

🤖 Generated with Claude Code

Greptile Summary

Allows health method calls from any authenticated role by adding an early return before role checks. This fixes log spam and broken communication when paired macOS/iOS devices (with role node) send periodic health checks to the gateway.

Confidence Score: 5/5

This PR is safe to merge - it fixes a legitimate authorization issue
The fix correctly allows health checks from node-role connections, which are read-only status probes. The change is minimal (3 lines), well-scoped, and consistent with health being in READ_METHODS
No files require special attention

_{Last reviewed commit: 520da47}

openclaw-barnacle bot added gateway size: XS trusted-contributor labels

This comment was marked as spam.

Sign in to view


          Gateway/Auth: allow authenticated health checks openclaw#19699 thanks @…

b976443

…Nachx639

mbelinky force-pushed the fix/gateway-health-role-auth branch from 520da47 to b976443 Compare

February 20, 2026 17:48

mbelinky merged commit 868fe48 into openclaw:main

10 checks passed

Contributor

mbelinky commented Feb 20, 2026

Merged via squash.

Prepared head SHA: b976443
Merge commit: 868fe48

Thanks @Nachx639!

github-actions bot mentioned this pull request

📡 Upstream Digest — 2026-02-20 18:35 UTC curtismercier/openclaw-mods#78

Open

rodrigogs pushed a commit to rodrigogs/openclaw that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

Hansen1018 added a commit to Hansen1018/openclaw that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

c9b59bd

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

vincentkoc pushed a commit that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (#19699)

9402c2d

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

dgarson pushed a commit to dgarson/clawdbot that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

2480d3a

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

mmyyfirstb pushed a commit to mmyyfirstb/openclaw that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

fc3a96c

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

obviyus pushed a commit to guirguispierre/openclaw that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

be338d6

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

github-actions bot mentioned this pull request

上游更新: v2026.2.21 — 32 P0 + 30 P1 待合并 jiulingyun/openclaw-cn#274

Closed

jiulingyun mentioned this pull request

upstream(gateway-part2): 移植 4 个冲突 commit (P1) — v2026.2.19→v2026.2.21 jiulingyun/openclaw-cn#310

Closed

6 tasks

Copilot AI mentioned this pull request

[WIP] Port four conflict commits for gateway module jiulingyun/openclaw-cn#313

Closed

mreedr pushed a commit to mreedr/openclaw-custom that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

4ce6b89

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

zooqueen pushed a commit to hanzoai/bot that referenced this pull request


          fix(gateway): allow health method for all authenticated roles (opencl…

d4c2188

…aw#19699)

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: b976443
Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

gateway size: XS