Summary

After updating OpenClaw to 2026.2.22-2,LAN HTTP access to Gateway Control UI shows "device identity required" error and fails to load.

Environment

• Gateway config: gateway.controlUi.allowInsecureAuth: true is set
• Access method: HTTP (ws://192.168.1.40:18789)
• Browser: Chrome/Safari

Troubleshooting Attempted

• ✅ Gateway service restarted
• ✅ Browser cache cleared
• ✅ Tested in incognito mode
• ✅ 127.0.0.1 local access works fine

Steps to reproduce

1. Start Gateway service
2. Access Control UI via LAN IP (http://192.168.1.40:18789)
3. Page fails to load with "device identity required" error

Expected behavior

With allowInsecureAuth: true configured, HTTP LAN access should allow token-based authentication without requiring device identity.

Actual behavior

Even with allowInsecureAuth: true configured, browser still blocks device identity request, preventing page from loading.

OpenClaw version

2026.2.22-2

Operating system

macOS 15,7,4

Install method

npm gloabal

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response