Bug type

Regression (worked before, now fails)

Summary

After upgrading to 2026.3.8, in the Gateway WebUI, when I go to Sessions and then click on a session. The gateway disconnects and loses the token.

Steps to reproduce

Config set to (for local LAN use):

   "dangerouslyAllowHostHeaderOriginFallback": true,
      "allowInsecureAuth": true,
      "dangerouslyDisableDeviceAuth": true
    },
    "auth": {
      "mode": "token",
      "token": "***REDACTED***"
    },

Open WebUI, enter token in Overview and hit Connect. Reports as ok. I can browse around the webUI with no issues.

Click Sessions, then a session, and then it disconnects.

I tried adding ?token= in the query parameters for a session URL and I get
“ unauthorized: gateway token mismatch (open the dashboard URL and paste the token in Control UI settings)”

It’s almost as if sessions require a different token.

Expected behavior

Session loads with no errors as it did previously.

Actual behavior

Gateway disconnects. This is in the logs:

12:58:11 info gateway/ws {"subsystem":"gateway/ws"} webchat disconnected code=1001 reason=WebSocket is closed due to suspension. conn=14d2e38e-cd00-41dd-b8c9-b9663fb78419

OpenClaw version

2026.3.8

Operating system

Ubuntu 22.04.5 LTS

Install method

npm global

Model

Unrelated to models

Provider / routing chain

unrelated to models.

Config file / key location

No response

Additional provider/model setup details

No response

Logs, screenshots, and evidence

Impact and severity

Unable to select sessions in WebUI

Additional information

No response