8 Commits

Author	SHA1	Message	Date
Peter Steinberger	767fd9f222	fix: classify /tools/invoke errors and sanitize 500s (#13185) (thanks @davidrudduck)	2026-02-13 16:58:30 +01:00
Harald Buerbaumer	30b6eccae5	feat(gateway): add auth rate-limiting & brute-force protection (#15035) ... * feat(gateway): add auth rate-limiting & brute-force protection Add a per-IP sliding-window rate limiter to Gateway authentication endpoints (HTTP, WebSocket upgrade, and WS message-level auth). When gateway.auth.rateLimit is configured, failed auth attempts are tracked per client IP. Once the threshold is exceeded within the sliding window, further attempts are blocked with HTTP 429 + Retry-After until the lockout period expires. Loopback addresses are exempt by default so local CLI sessions are never locked out. The limiter is only created when explicitly configured (undefined otherwise), keeping the feature fully opt-in and backward-compatible. * fix(gateway): isolate auth rate-limit scopes and normalize 429 responses --------- Co-authored-by: buerbaumer <buerbaumer@users.noreply.github.com> Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-02-13 15:32:38 +01:00
Peter Steinberger	ee31cd47b4	fix: close OC-02 gaps in ACP permission + gateway HTTP deny config (#15390) (thanks @aether-ai-agent)	2026-02-13 14:30:06 +01:00
Seb Slight	abcaa8c7a9	Docs: add nav titles across docs (#5689)	2026-01-31 15:04:03 -06:00
cpojer	8cab78abbc	chore: Run `pnpm format:fix`.	2026-01-31 21:13:13 +09:00
Peter Steinberger	9a7160786a	refactor: rename to openclaw	2026-01-30 03:16:21 +01:00
Peter Steinberger	6d16a658e5	refactor: rename clawdbot to moltbot with legacy compat	2026-01-27 12:21:02 +00:00
Peter Steinberger	d73e8ecca3	fix: document tools invoke + honor main session key (#1575) (thanks @vignesh07)	2026-01-24 09:29:32 +00:00