system say unauthorized: gateway token missing (open the dashboard URL and paste the token in Control UI settings)
此网关需要身份验证。添加令牌或密码，然后点击连接。
openclaw dashboard --no-open → tokenized URL
openclaw doctor --generate-gateway-token → set token
but i run openclaw dashboard --no-open it is still error
🦞 OpenClaw 2026.3.8 (3caab92) — The only crab in your contacts you actually want to hear from. 🦞
00:55:12 [canvas] host mounted at http://127.0.0.1:18789/__openclaw__/canvas/ (root C:\Users\Administrator.openclaw\canvas)
00:55:12 [gateway] ⚠️ gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true is enabled. Host-header origin fallback weakens origin checks and should only be used as break-glass.
00:55:13 [heartbeat] started
00:55:13 [health-monitor] started (interval: 300s, startup-grace: 60s, channel-connect-grace: 120s)
00:55:13 [gateway] agent model: deepseek-ai-deepseek-v3/deepseek-ai/DeepSeek-V3
00:55:13 [gateway] listening on ws://127.0.0.1:18789, ws://[::1]:18789 (PID 102540)
00:55:13 [gateway] log file: \tmp\openclaw\openclaw-2026-03-10.log
00:55:13 [gateway] security warning: dangerous config flags enabled: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true. Run openclaw security audit.
00:55:13 [browser/server] Browser control listening on http://127.0.0.1:18791/ (auth=token)
00:55:13 [hooks:loader] Registered hook: boot-md -> gateway:startup
00:55:13 [hooks:loader] Registered hook: bootstrap-extra-files -> agent:bootstrap
00:55:13 [hooks:loader] Registered hook: command-logger -> command
00:55:13 [hooks:loader] Registered hook: session-memory -> command:new, command:reset
00:55:13 [hooks] loaded 4 internal hook handlers
00:55:13 [ws] security warning: websocket origin accepted via Host-header fallback conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c count=1 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
00:55:13 [gateway] security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
00:55:13 [ws] unauthorized conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
00:55:13 [ws] closed before connect conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=4008 reason=connect failed
16:51:31 info ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
🦞 OPENCLAW 🦞
16:51:32 info Agents: main (default)
16:51:32 info Heartbeat interval: 1h (main)
16:51:32 info Session store (main): C:\Users\Administrator.openclaw\agents\main\sessions\sessions.json (0 entries)
16:51:33 info Run "openclaw doctor --fix" to apply changes.
16:51:41 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a count=11 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:51:41 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:51:41 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:51:41 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a
16:51:57 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b count=12 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:51:57 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:51:57 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:51:57 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b
16:52:13 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=c608aee9-8087-4f54-b8c1-9f5a7977890d count=13 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:13 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:13 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=c608aee9-8087-4f54-b8c1-9f5a7977890d remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:13 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=c608aee9-8087-4f54-b8c1-9f5a7977890d
16:52:29 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad count=14 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:29 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:29 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:29 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=317577d9-4616-4809-bd0f-71d55c225d78 count=15 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:44 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} unauthorized conn=317577d9-4616-4809-bd0f-71d55c225d78 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} {"cause":"unauthorized","handshake":"failed","durationMs":77,"lastFrameType":"req","lastFrameMethod":"connect","lastFrameId":"5c891b1e-b908-43d6-a02e-6fafea1a33d6","host":"127.0.0.1:18789","origin":"http://127.0.0.1:18789","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","authMode":"token","authProvided":"none","authReason":"token_missing","allowTailscale":false,"client":"openclaw-control-ui","mode":"webchat","version":"2026.3.8"} closed before connect conn=317577d9-4616-4809-bd0f-71d55c225d78 remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=1008 reason=unauthorized: gateway token missing (open the dashboard URL and paste the token in Control UI settings)
16:52:45 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd count=16 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:45 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:45 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:45 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd
16:53:01 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec count=17 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:01 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:01 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:01 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec
16:53:17 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8 count=18 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:17 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:17 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:17 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8
16:53:33 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=e3a70c95-f572-487d-af8f-4c5fd05980b6 count=19 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:33 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:33 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=e3a70c95-f572-487d-af8f-4c5fd05980b6 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:33 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=e3a70c95-f572-487d-af8f-4c5fd05980b6
16:53:49 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8 count=20 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:49 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:49 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:49 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8
16:55:12 info gateway/canvas {"subsystem":"gateway/canvas"} canvas host mounted at http://127.0.0.1:18789/__openclaw__/canvas/ (root C:\Users\Administrator.openclaw\canvas)
16:55:12 warn gateway {"subsystem":"gateway"} ⚠️ gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true is enabled. Host-header origin fallback weakens origin checks and should only be used as break-glass.
16:55:13 info gateway/heartbeat {"subsystem":"gateway/heartbeat"} {"intervalMs":3600000} heartbeat: started
16:55:13 info gateway/health-monitor {"subsystem":"gateway/health-monitor"} started (interval: 300s, startup-grace: 60s, channel-connect-grace: 120s)
16:55:13 info gateway {"subsystem":"gateway"} agent model: deepseek-ai-deepseek-v3/deepseek-ai/DeepSeek-V3
16:55:13 info gateway {"subsystem":"gateway"} listening on ws://127.0.0.1:18789, ws://[::1]:18789 (PID 102540)
16:55:13 info gateway {"subsystem":"gateway"} log file: \tmp\openclaw\openclaw-2026-03-10.log
16:55:13 warn gateway {"subsystem":"gateway"} security warning: dangerous config flags enabled: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true. Run openclaw security audit.
16:55:13 info browser/server {"subsystem":"browser/server"} Browser control listening on http://127.0.0.1:18791/ (auth=token)
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: boot-md -> gateway:startup
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: bootstrap-extra-files -> agent:bootstrap
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: command-logger -> command
16:55:13 debug cron {"module":"cron","storePath":"C:\Users\Administrator\.openclaw\cron\jobs.json"} {"jobCount":0,"enabledCount":0,"withNextRun":0} cron: armTimer skipped - no jobs with nextRunAtMs
16:55:13 info cron {"module":"cron","storePath":"C:\Users\Administrator\.openclaw\cron\jobs.json"} {"enabled":true,"jobs":0,"nextWakeAtMs":null} cron: started
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: session-memory -> command:new, command:reset
16:55:13 info gateway/hooks {"subsystem":"gateway/hooks"} loaded 4 internal hook handlers
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c count=1 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:55:13 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} unauthorized conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} {"cause":"unauthorized","handshake":"failed","durationMs":71,"lastFrameType":"req","lastFrameMethod":"connect","lastFrameId":"16b9862e-9226-4e53-a609-7fa7d89c3fda","host":"127.0.0.1:18789","origin":"http://127.0.0.1:18789","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","authMode":"token","authProvided":"none","authReason":"token_missing","allowTailscale":false,"client":"openclaw-control-ui","mode":"webchat","version":"2026.3.8"} closed before connect conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=4008 reason=connect failed
16:55:14 info bonjour: advertised gateway fqdn=DESKTOP-7N4ARF9 (OpenClaw)._openclaw-gw._tcp.local. host=openclaw.local. port=18789 state=announcing
Log tail truncated (increase --max-bytes).
system say unauthorized: gateway token missing (open the dashboard URL and paste the token in Control UI settings)
此网关需要身份验证。添加令牌或密码，然后点击连接。
openclaw dashboard --no-open → tokenized URL
openclaw doctor --generate-gateway-token → set token
but i run openclaw dashboard --no-open it is still error
🦞 OpenClaw 2026.3.8 (3caab92) — The only crab in your contacts you actually want to hear from. 🦞
00:55:12 [canvas] host mounted at http://127.0.0.1:18789/__openclaw__/canvas/ (root C:\Users\Administrator.openclaw\canvas)⚠️ gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true is enabled. Host-header origin fallback weakens origin checks and should only be used as break-glass.
00:55:12 [gateway]
00:55:13 [heartbeat] started
00:55:13 [health-monitor] started (interval: 300s, startup-grace: 60s, channel-connect-grace: 120s)
00:55:13 [gateway] agent model: deepseek-ai-deepseek-v3/deepseek-ai/DeepSeek-V3
00:55:13 [gateway] listening on ws://127.0.0.1:18789, ws://[::1]:18789 (PID 102540)
00:55:13 [gateway] log file: \tmp\openclaw\openclaw-2026-03-10.log
00:55:13 [gateway] security warning: dangerous config flags enabled: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true. Run
openclaw security audit.00:55:13 [browser/server] Browser control listening on http://127.0.0.1:18791/ (auth=token)
00:55:13 [hooks:loader] Registered hook: boot-md -> gateway:startup
00:55:13 [hooks:loader] Registered hook: bootstrap-extra-files -> agent:bootstrap
00:55:13 [hooks:loader] Registered hook: command-logger -> command
00:55:13 [hooks:loader] Registered hook: session-memory -> command:new, command:reset
00:55:13 [hooks] loaded 4 internal hook handlers
00:55:13 [ws] security warning: websocket origin accepted via Host-header fallback conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c count=1 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
00:55:13 [gateway] security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
00:55:13 [ws] unauthorized conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
00:55:13 [ws] closed before connect conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=4008 reason=connect failed
16:51:31 info ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██░▄▄▄░██░▄▄░██░▄▄▄██░▀██░██░▄▄▀██░████░▄▄▀██░███░██
██░███░██░▀▀░██░▄▄▄██░█░█░██░█████░████░▀▀░██░█░█░██
██░▀▀▀░██░█████░▀▀▀██░██▄░██░▀▀▄██░▀▀░█░██░██▄▀▄▀▄██
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
🦞 OPENCLAW 🦞
16:51:32 info Agents: main (default)⚠️ gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true is enabled. Host-header origin fallback weakens origin checks and should only be used as break-glass.
16:51:32 info Heartbeat interval: 1h (main)
16:51:32 info Session store (main): C:\Users\Administrator.openclaw\agents\main\sessions\sessions.json (0 entries)
16:51:33 info Run "openclaw doctor --fix" to apply changes.
16:51:41 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a count=11 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:51:41 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:51:41 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:51:41 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=1f8b3b55-e3e7-4881-a8b6-ebb635bd011a
16:51:57 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b count=12 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:51:57 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:51:57 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:51:57 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=6db1768b-1b02-4eb5-9ebd-8ccb8a36cf1b
16:52:13 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=c608aee9-8087-4f54-b8c1-9f5a7977890d count=13 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:13 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:13 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=c608aee9-8087-4f54-b8c1-9f5a7977890d remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:13 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=c608aee9-8087-4f54-b8c1-9f5a7977890d
16:52:29 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad count=14 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:29 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:29 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:29 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=9dfdbc51-ecf6-4636-b74c-ee1255ba79ad
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=317577d9-4616-4809-bd0f-71d55c225d78 count=15 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:44 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} unauthorized conn=317577d9-4616-4809-bd0f-71d55c225d78 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
16:52:44 warn gateway/ws {"subsystem":"gateway/ws"} {"cause":"unauthorized","handshake":"failed","durationMs":77,"lastFrameType":"req","lastFrameMethod":"connect","lastFrameId":"5c891b1e-b908-43d6-a02e-6fafea1a33d6","host":"127.0.0.1:18789","origin":"http://127.0.0.1:18789","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","authMode":"token","authProvided":"none","authReason":"token_missing","allowTailscale":false,"client":"openclaw-control-ui","mode":"webchat","version":"2026.3.8"} closed before connect conn=317577d9-4616-4809-bd0f-71d55c225d78 remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=1008 reason=unauthorized: gateway token missing (open the dashboard URL and paste the token in Control UI settings)
16:52:45 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd count=16 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:52:45 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:52:45 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:52:45 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=f4b28df5-23dc-4d43-bd94-9bc26c3a6acd
16:53:01 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec count=17 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:01 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:01 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:01 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=895fe77f-0ed8-4c96-ae92-3834b7abfcec
16:53:17 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8 count=18 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:17 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:17 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:17 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=0ae87983-8c3f-41f5-9de2-3460ddb24db8
16:53:33 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=e3a70c95-f572-487d-af8f-4c5fd05980b6 count=19 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:33 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:33 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=e3a70c95-f572-487d-af8f-4c5fd05980b6 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:33 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=e3a70c95-f572-487d-af8f-4c5fd05980b6
16:53:49 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8 count=20 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:53:49 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:53:49 info gateway/ws {"subsystem":"gateway/ws"} webchat connected conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8 remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8
16:53:49 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=4008 reason=connect failed conn=2178c7cf-cb6f-4445-8bb2-79bd48fab4c8
16:55:12 info gateway/canvas {"subsystem":"gateway/canvas"} canvas host mounted at http://127.0.0.1:18789/__openclaw__/canvas/ (root C:\Users\Administrator.openclaw\canvas)
16:55:12 warn gateway {"subsystem":"gateway"}
16:55:13 info gateway/heartbeat {"subsystem":"gateway/heartbeat"} {"intervalMs":3600000} heartbeat: started
16:55:13 info gateway/health-monitor {"subsystem":"gateway/health-monitor"} started (interval: 300s, startup-grace: 60s, channel-connect-grace: 120s)
16:55:13 info gateway {"subsystem":"gateway"} agent model: deepseek-ai-deepseek-v3/deepseek-ai/DeepSeek-V3
16:55:13 info gateway {"subsystem":"gateway"} listening on ws://127.0.0.1:18789, ws://[::1]:18789 (PID 102540)
16:55:13 info gateway {"subsystem":"gateway"} log file: \tmp\openclaw\openclaw-2026-03-10.log
16:55:13 warn gateway {"subsystem":"gateway"} security warning: dangerous config flags enabled: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true. Run
openclaw security audit.16:55:13 info browser/server {"subsystem":"browser/server"} Browser control listening on http://127.0.0.1:18791/ (auth=token)
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: boot-md -> gateway:startup
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: bootstrap-extra-files -> agent:bootstrap
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: command-logger -> command
16:55:13 debug cron {"module":"cron","storePath":"C:\Users\Administrator\.openclaw\cron\jobs.json"} {"jobCount":0,"enabledCount":0,"withNextRun":0} cron: armTimer skipped - no jobs with nextRunAtMs
16:55:13 info cron {"module":"cron","storePath":"C:\Users\Administrator\.openclaw\cron\jobs.json"} {"enabled":true,"jobs":0,"nextWakeAtMs":null} cron: started
16:55:13 info hooks:loader {"subsystem":"hooks:loader"} Registered hook: session-memory -> command:new, command:reset
16:55:13 info gateway/hooks {"subsystem":"gateway/hooks"} loaded 4 internal hook handlers
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} security warning: websocket origin accepted via Host-header fallback conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c count=1 host=127.0.0.1:18789 origin=http://127.0.0.1:18789
16:55:13 warn gateway {"subsystem":"gateway"} security metric: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback accepted a websocket connect request
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} unauthorized conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 client=openclaw-control-ui webchat v2026.3.8 reason=token_missing
16:55:13 warn gateway/ws {"subsystem":"gateway/ws"} {"cause":"unauthorized","handshake":"failed","durationMs":71,"lastFrameType":"req","lastFrameMethod":"connect","lastFrameId":"16b9862e-9226-4e53-a609-7fa7d89c3fda","host":"127.0.0.1:18789","origin":"http://127.0.0.1:18789","userAgent":"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36","authMode":"token","authProvided":"none","authReason":"token_missing","allowTailscale":false,"client":"openclaw-control-ui","mode":"webchat","version":"2026.3.8"} closed before connect conn=fa4e54bd-c3b0-459b-bfe4-678bfa3ac65c remote=127.0.0.1 fwd=n/a origin=http://127.0.0.1:18789 host=127.0.0.1:18789 ua=Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 code=4008 reason=connect failed
16:55:14 info bonjour: advertised gateway fqdn=DESKTOP-7N4ARF9 (OpenClaw)._openclaw-gw._tcp.local. host=openclaw.local. port=18789 state=announcing
Log tail truncated (increase --max-bytes).