fix: remove hardcoded OpenClaw gateway token

Removes exposed API key fallback flagged by GitGuardian.
Token should only come from OPENCLAW_GATEWAY_TOKEN env var.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
JohnRiceML
2026-02-27 13:07:45 -06:00
co-authored by Claude Opus 4.6
parent dd851cace5
commit 0143591b7e
+1 -1
View File
@@ -6,7 +6,7 @@ import OpenAI from 'openai'
// Route through the OpenClaw gateway — no separate API key needed
const openai = new OpenAI({
baseURL: 'http://localhost:18789/v1',
apiKey: process.env.OPENCLAW_GATEWAY_TOKEN || 'REDACTED_TOKEN',
apiKey: process.env.OPENCLAW_GATEWAY_TOKEN,
})
export async function POST(