← Back to Clusters

Authentication and Rate Limiting Fixes

This cluster addresses various issues related to authentication, including OAuth validation, rate limiting configurations, and test stability.

19 PRs
fix auth Representative: #19885
# Title Author Created GitHub
8129 fix(auth): validate OAuth redirect URI to prevent open redirects yubrew 2026-02-03 View
8389 fix(test): eliminate flaky chutes-oauth 'bad port' race condition (#8337) Glucksberg 2026-02-04 View
8494 fix(test): resolve flaky port race condition in chutes-oauth.test.ts gavinbmoore 2026-02-04 View
10108 fix: override stale Anthropic OAuth stealth headers for Opus 4.6 CivilBooks 2026-02-06 View
16658 test: isolate env-dependent gateway/auth fixtures sauerdaniel 2026-02-15 View
16877 fix: Authentication Rate Limiting is Opt-In Only - Disabled by Default coygeek 2026-02-15 View
16881 fix(gateway): enable auth rate limiting by default Limitless2023 2026-02-15 View
16963 fix: enable auth rate limiting by default StressTestor 2026-02-15 View
19756 fix(security): OC-101 refresh token rotation enforcement — Aether AI Agent aether-ai-agent 2026-02-18 View
19885 test(gateway,browser): isolate tests from ambient OPENCLAW_GATEWAY_TOKEN rep NewdlDewdl 2026-02-18 View
19937 fix(gateway): validate token/password auth modes and isolate gateway auth env... NewdlDewdl 2026-02-18 View
20404 test: isolate gateway auth env vars in test runner victorGPT 2026-02-18 View
20782 feat(gateway): Cloudflare Tunnel & Access integration G4brym 2026-02-19 View
21517 fix: preserve pi-ai default betas when context1m/anthropicBeta overrides anth... ManuelFerreras 2026-02-20 View
21651 fix(gateway): token fallback + operator.admin scope superset in pairing check lan17 2026-02-20 View
21723 fix(onboard): raise custom API contextWindow default to 16k AIflow-Labs 2026-02-20 View
22766 fix(security): enable gateway auth rate limiting by default (CWE-307) brandonwise 2026-02-21 View
23055 test: clear gateway env vars in beforeEach to prevent leakage thinstripe 2026-02-21 View
23139 test: fix flaky auth tests when OPENCLAW_GATEWAY_TOKEN is present Imccccc 2026-02-22 View