Issue Station
Sign In
Tools hereToolbox

openclaw - 💡(How to fix) Fix Canvas embed in WebChat returns 401 (missing Gateway auth token in embed rendering)

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

Root Cause

The Canvas host routes (/__openclaw__/canvas/*) require Gateway auth (token mode). When the WebChat client renders an [embed ...] block, the browser's iframe request does not include the Gateway auth token, resulting in 401.

Fix Action

Workaround

Export as static image (Chrome headless screenshot) and attach via MEDIA directive instead of embed.

RAW_BUFFERClick to expand / collapse

Problem

When using [embed url="/__openclaw__/canvas/<file>.html"] in WebChat, the embedded iframe request returns HTTP 401 Unauthorized.

Root Cause

The Canvas host routes (/__openclaw__/canvas/*) require Gateway auth (token mode). When the WebChat client renders an [embed ...] block, the browser's iframe request does not include the Gateway auth token, resulting in 401.

Environment

  • OpenClaw: 2026.5.22
  • Gateway auth: token mode
  • Canvas: host enabled, root configured

Expected Behavior

WebChat embed rendering should automatically inject the Gateway auth token into canvas iframe requests (via query param or header), similar to how connected Node apps automatically include auth.

Workaround

Export as static image (Chrome headless screenshot) and attach via MEDIA directive instead of embed.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

openclaw - 💡(How to fix) Fix Canvas embed in WebChat returns 401 (missing Gateway auth token in embed rendering)