Files
openclaw/src/gateway/auth-mode-policy.ts

27 lines
1.0 KiB
TypeScript

import type { OpenClawConfig } from "../config/config.js";
import { hasConfiguredSecretInput } from "../config/types.secrets.js";
export const EXPLICIT_GATEWAY_AUTH_MODE_REQUIRED_ERROR =
"Invalid config: gateway.auth.token and gateway.auth.password are both configured, but gateway.auth.mode is unset. Set gateway.auth.mode to token or password.";
export function hasAmbiguousGatewayAuthModeConfig(cfg: OpenClawConfig): boolean {
const auth = cfg.gateway?.auth;
if (!auth) {
return false;
}
if (typeof auth.mode === "string" && auth.mode.trim().length > 0) {
return false;
}
const defaults = cfg.secrets?.defaults;
const tokenConfigured = hasConfiguredSecretInput(auth.token, defaults);
const passwordConfigured = hasConfiguredSecretInput(auth.password, defaults);
return tokenConfigured && passwordConfigured;
}
export function assertExplicitGatewayAuthModeWhenBothConfigured(cfg: OpenClawConfig): void {
if (!hasAmbiguousGatewayAuthModeConfig(cfg)) {
return;
}
throw new Error(EXPLICIT_GATEWAY_AUTH_MODE_REQUIRED_ERROR);
}