nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/docs
History
Harald Buerbaumer 30b6eccae5
feat(gateway): add auth rate-limiting & brute-force protection (#15035) 
* feat(gateway): add auth rate-limiting & brute-force protection

Add a per-IP sliding-window rate limiter to Gateway authentication
endpoints (HTTP, WebSocket upgrade, and WS message-level auth).

When gateway.auth.rateLimit is configured, failed auth attempts are
tracked per client IP. Once the threshold is exceeded within the
sliding window, further attempts are blocked with HTTP 429 + Retry-After
until the lockout period expires. Loopback addresses are exempt by
default so local CLI sessions are never locked out.

The limiter is only created when explicitly configured (undefined
otherwise), keeping the feature fully opt-in and backward-compatible.

* fix(gateway): isolate auth rate-limit scopes and normalize 429 responses

---------

Co-authored-by: buerbaumer <buerbaumer@users.noreply.github.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 		2026-02-13 15:32:38 +01:00
..
.i18n Docs: seed ja-JP translations 2026-02-08 10:18:04 -08:00
assets docs: modernize gateway configuration page (Phase 1) (#14111) 2026-02-11 10:44:34 -05:00
automation fix: harden hook session key routing defaults 2026-02-13 02:09:14 +01:00
channels Docs: add User.Read.All permission info for MS Teams user mentions 2026-02-13 15:10:57 +01:00
cli CLI: add plugins uninstall command (#5985) (openclaw#6141) thanks @JustasMonkev 2026-02-12 20:11:26 -06:00
concepts fix(docs): remove hardcoded Mermaid init blocks that break dark mode (#15157) 2026-02-12 22:48:26 -05:00
debug Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
diagnostics Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
experiments fix: prevent act:evaluate hangs from getting browser tool stuck/killed (#13498) 2026-02-11 07:54:48 +08:00
gateway feat(gateway): add auth rate-limiting & brute-force protection (#15035) 2026-02-13 15:32:38 +01:00
help Tests: disable vmForks on Node 24 and document override 2026-02-13 08:15:25 -05:00
images Channels: finish Feishu/Lark integration 2026-02-03 14:27:39 -08:00
install docs: add Windows installer debug equivalents 2026-02-13 02:07:03 +01:00
ja-JP docs: fix ja-JP dashboard URL link 2026-02-09 11:26:27 -06:00
nodes fix: fix: transcribe audio before mention check in groups with requireMention (openclaw#9973) thanks @mcinteerj 2026-02-12 09:58:01 -06:00
platforms chore(release): bump version to 2026.2.13 2026-02-13 04:13:07 +01:00
plugins docs: canonicalize docs paths and align zh navigation (#11428) 2026-02-07 15:40:35 -05:00
providers feat(zai): auto-detect endpoint + default glm-5 (#14786) 2026-02-12 19:16:04 +01:00
refactor refactor: unify peer kind to ChatType, rename dm to direct (#11881) 2026-02-09 09:20:52 +09:00
reference Tests: disable vmForks on Node 24 and document override 2026-02-13 08:15:25 -05:00
security Centralize date/time formatting utilities (#11831) 2026-02-08 04:53:31 -08:00
start fix(docs): remove hardcoded Mermaid init blocks that break dark mode (#15157) 2026-02-12 22:48:26 -05:00
tools fix(browser): require auth on control HTTP and auto-bootstrap token 2026-02-13 02:02:28 +01:00
web docs: canonicalize docs paths and align zh navigation (#11428) 2026-02-07 15:40:35 -05:00
zh-CN fix: remove bundled soul-evil hook (closes #8776) (#14757) 2026-02-12 18:52:09 +01:00
CNAME refactor: rename to openclaw 2026-01-30 03:16:21 +01:00
brave-search.md Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
ci.md chore: Cleanup useless CI job. 2026-02-12 09:37:45 +09:00
date-time.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
docs.json fix: remove bundled soul-evil hook (closes #8776) (#14757) 2026-02-12 18:52:09 +01:00
index.md Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
logging.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
network.md docs: canonicalize docs paths and align zh navigation (#11428) 2026-02-07 15:40:35 -05:00
perplexity.md Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
pi-dev.md Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
pi.md fix: align pi-coding-agent typings and docs 2026-02-01 16:08:01 -08:00
prose.md docs: canonicalize docs paths and align zh navigation (#11428) 2026-02-07 15:40:35 -05:00
style.css Docs: streamline start and install docs (#9648) 2026-02-05 10:09:45 -05:00
tts.md Docs: add nav titles across docs (#5689) 2026-01-31 15:04:03 -06:00
vps.md Docs: enable markdownlint autofixables except list numbering (#10476) 2026-02-06 10:08:59 -05:00
whatsapp-openclaw-ai-zh.jpg Docs: add zh-CN landing notice + AI image 2026-02-02 18:35:01 +01:00
whatsapp-openclaw.jpg refactor: rename to openclaw 2026-01-30 03:16:21 +01:00