From a965a0d77308d2d2bf412b1b3dca989a0d41a102 Mon Sep 17 00:00:00 2001
From: user123 <user123@user.com>
Date: Fri, 30 Jan 2026 18:31:29 +0800
Subject: [PATCH] =?UTF-8?q?=E9=9A=8F=E6=9C=BA=E7=94=9F=E6=88=90token?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 openclaw/install.sh                    | 25 ++++++++++++++----
 openclaw/installer/internal/sys/sys.go | 36 ++++++++++++++++++++++----
 2 files changed, 51 insertions(+), 10 deletions(-)

diff --git a/openclaw/install.sh b/openclaw/install.sh
index e42b709..5b5d856 100644
--- a/openclaw/install.sh
+++ b/openclaw/install.sh
@@ -139,6 +139,13 @@ configure_openclaw() {
     log_info "开始配置 OpenClaw..."
     
     mkdir -p "${CONFIG_DIR}"
+
+    # 生成随机 Token
+    if command -v openssl >/dev/null 2>&1; then
+        GATEWAY_TOKEN=$(openssl rand -hex 16)
+    else
+        GATEWAY_TOKEN=$(date +%s%N | sha256sum | head -c 32)
+    fi
     
     echo -e "${CYAN}请选择 API 类型:${PLAIN}"
     echo "1. Anthropic 官方 API"
@@ -154,9 +161,12 @@ configure_openclaw() {
         cat > "${CONFIG_FILE}" <<EOF
 {
   "gateway": {
-    "mode": "local",
+    "mode": "token",
     "bind": "loopback",
-    "port": 18789
+    "port": 18789,
+    "auth": {
+      "token": "${GATEWAY_TOKEN}"
+    }
   },
   "env": {
     "ANTHROPIC_API_KEY": "${api_key}"
@@ -195,9 +205,12 @@ EOF
         cat > "${CONFIG_FILE}" <<EOF
 {
   "gateway": {
-    "mode": "local",
+    "mode": "token",
     "bind": "loopback",
-    "port": 18789
+    "port": 18789,
+    "auth": {
+      "token": "${GATEWAY_TOKEN}"
+    }
   },
   "agents": {
     "defaults": {
@@ -255,7 +268,9 @@ EOF
     fi
     
     log_info "配置文件已生成: ${CONFIG_FILE}"
-    echo -e "${GREEN}配置文件路径: ${CONFIG_FILE}${PLAIN}"
+    echo -e "${GREEN}配置文件绝对路径: ${CONFIG_FILE}${PLAIN}"
+    echo -e "${GREEN}Gateway Token: ${GATEWAY_TOKEN}${PLAIN}"
+    echo -e "${YELLOW}请妥善保存此 Token，用于远程连接 Gateway。${PLAIN}"
 }
 
 # 配置 Systemd 服务
diff --git a/openclaw/installer/internal/sys/sys.go b/openclaw/installer/internal/sys/sys.go
index 4e24a6a..11bda6b 100644
--- a/openclaw/installer/internal/sys/sys.go
+++ b/openclaw/installer/internal/sys/sys.go
@@ -3,6 +3,7 @@ package sys
 import (
 	"bufio"
 	"bytes"
+	"crypto/rand"
 	"crypto/sha256"
 	"encoding/hex"
 	"encoding/json"
@@ -67,9 +68,15 @@ type OpenclawConfig struct {
 }
 
 type GatewayConfig struct {
-	Mode string `json:"mode"`
-	Bind string `json:"bind"`
-	Port int    `json:"port"`
+	Mode string      `json:"mode"`
+	Bind string      `json:"bind"`
+	Port int         `json:"port"`
+	Auth *AuthConfig `json:"auth,omitempty"`
+}
+
+type AuthConfig struct {
+	Mode  string `json:"mode,omitempty"`
+	Token string `json:"token"`
 }
 
 type AgentsConfig struct {
@@ -928,11 +935,22 @@ func GenerateAndWriteConfig(opts ConfigOptions) error {
 	}
 	configFile := filepath.Join(configDir, "openclaw.json")
 
+	// 生成随机 Token
+	tokenBytes := make([]byte, 16)
+	if _, err := io.ReadFull(rand.Reader, tokenBytes); err != nil {
+		// 降级方案
+		copy(tokenBytes, []byte(fmt.Sprintf("%d", time.Now().UnixNano())))
+	}
+	token := hex.EncodeToString(tokenBytes)
+
 	config := OpenclawConfig{
 		Gateway: GatewayConfig{
-			Mode: "local",
+			Mode: "token",
 			Bind: "loopback",
 			Port: 18789,
+			Auth: &AuthConfig{
+				Token: token,
+			},
 		},
 		Tools: ToolsConfig{
 			Elevated: ElevatedConfig{
@@ -1018,7 +1036,15 @@ func GenerateAndWriteConfig(opts ConfigOptions) error {
 		return fmt.Errorf("序列化配置失败: %v", err)
 	}
 
-	return os.WriteFile(configFile, data, 0644)
+	if err := os.WriteFile(configFile, data, 0644); err != nil {
+		return err
+	}
+
+	fmt.Printf("配置文件绝对路径: %s\n", configFile)
+	fmt.Printf("Gateway Token: %s\n", token)
+	fmt.Println("请妥善保存此 Token，用于远程连接 Gateway。")
+
+	return nil
 }
 
 // StartGateway 启动网关