16 replies

BlueBubbles webhooks auth failure when on same machine as OpenClaw

Setup

- BlueBubbles v1.9.9 on macOS Ventura
- OpenClaw v2026.2.25
- Symptom: startup fails to fetch server GUID silently, webhook rejects with

unauthorized guid

unauthorized guid

- Root cause hypothesis: auth header sent as Password: (capital P) but BB 1.9.9 requires lowercase password: or query param

openclaw.json config elements:

"bluebubbles": {
      "enabled": true,
      "serverUrl": "http://localhost:1234",
      "password": "******",
      "webhookPath": "/bluebubbles-webhook",
      "dmPolicy": "pairing",
      "groupPolicy": "allowlist"
    }

"bluebubbles": {
      "enabled": true,
      "serverUrl": "http://localhost:1234",
      "password": "******",
      "webhookPath": "/bluebubbles-webhook",
      "dmPolicy": "pairing",
      "groupPolicy": "allowlist"
    }

In BlueBubbles....

Webhook is set to:

http://localhost:18789/bluebubbles-webhook

http://localhost:18789/bluebubbles-webhook

for 'All Events'

Messsages are successfully coming into BlueBubbles, but as you can se below, the webhook interactions are blackballed because of the unauthorized

guid

guid

.

##What I'm seeing

When I run:

curl -s "http://localhost:1234/api/v1/server/info" -H "Password: ********"

curl -s "http://localhost:1234/api/v1/server/info" -H "Password: ********"

(or with

"password = ..."

"password = ..."

) it returns

{"status":401,"message":"You are not authorized to access this resource","error":{"type":"Authentication Error","message":"Missing server password!"}}

{"status":401,"message":"You are not authorized to access this resource","error":{"type":"Authentication Error","message":"Missing server password!"}}

but with

curl -s "http://localhost:1234/api/v1/server/info?password=*******"
{"status":200,"message":"Success","data":{"computer_id":"[email protected]","os_version":"13.7.8","server_version":"1.9.9","private_api":false,"proxy_service":"XXX","helper_connected":false,"detected_icloud":"appleid_email","detected_imessage":"appleid_email","macos_time_sync":2.137651,"local_ipv4s":["192.168.0.22"],"local_ipv6s":["XXXX:...","XXXX:..."]}}

curl -s "http://localhost:1234/api/v1/server/info?password=*******"
{"status":200,"message":"Success","data":{"computer_id":"[email protected]","os_version":"13.7.8","server_version":"1.9.9","private_api":false,"proxy_service":"XXX","helper_connected":false,"detected_icloud":"appleid_email","detected_imessage":"appleid_email","macos_time_sync":2.137651,"local_ipv4s":["192.168.0.22"],"local_ipv6s":["XXXX:...","XXXX:..."]}}

this is what I get whenever I try to send an imessage to the monitored account:

{"0":"[bluebubbles] webhook rejected: unauthorized guid=***","_meta":{"runtime":"node","runtimeVersion":"22.22.0","hostname":"unknown","name":"openclaw","date":"2026-02-27T03:29:10.826Z","logLevelId":4,"logLevelName":"WARN" ...

{"0":"[bluebubbles] webhook rejected: unauthorized guid=***","_meta":{"runtime":"node","runtimeVersion":"22.22.0","hostname":"unknown","name":"openclaw","date":"2026-02-27T03:29:10.826Z","logLevelId":4,"logLevelName":"WARN" ...

FotC�

Friends of the Crustacean 🦞🤝•2w ago•

16 replies

Nick R

BlueBubbles webhooks auth failure when on same machine as OpenClaw

Setup

- BlueBubbles v1.9.9 on macOS Ventura
- OpenClaw v2026.2.25
- Symptom: startup fails to fetch server GUID silently, webhook rejects with

unauthorized guid

unauthorized guid

- Root cause hypothesis: auth header sent as Password: (capital P) but BB 1.9.9 requires lowercase password: or query param

openclaw.json config elements:

"bluebubbles": {
      "enabled": true,
      "serverUrl": "http://localhost:1234",
      "password": "******",
      "webhookPath": "/bluebubbles-webhook",
      "dmPolicy": "pairing",
      "groupPolicy": "allowlist"
    }

"bluebubbles": {
      "enabled": true,
      "serverUrl": "http://localhost:1234",
      "password": "******",
      "webhookPath": "/bluebubbles-webhook",
      "dmPolicy": "pairing",
      "groupPolicy": "allowlist"
    }

In BlueBubbles....

Webhook is set to:

http://localhost:18789/bluebubbles-webhook

http://localhost:18789/bluebubbles-webhook

for 'All Events'

Messsages are successfully coming into BlueBubbles, but as you can se below, the webhook interactions are blackballed because of the unauthorized

guid

guid

.

##What I'm seeing

When I run:

curl -s "http://localhost:1234/api/v1/server/info" -H "Password: ********"

curl -s "http://localhost:1234/api/v1/server/info" -H "Password: ********"

(or with

"password = ..."

"password = ..."

) it returns

{"status":401,"message":"You are not authorized to access this resource","error":{"type":"Authentication Error","message":"Missing server password!"}}

{"status":401,"message":"You are not authorized to access this resource","error":{"type":"Authentication Error","message":"Missing server password!"}}

but with

curl -s "http://localhost:1234/api/v1/server/info?password=*******"
{"status":200,"message":"Success","data":{"computer_id":"[email protected]","os_version":"13.7.8","server_version":"1.9.9","private_api":false,"proxy_service":"XXX","helper_connected":false,"detected_icloud":"appleid_email","detected_imessage":"appleid_email","macos_time_sync":2.137651,"local_ipv4s":["192.168.0.22"],"local_ipv6s":["XXXX:...","XXXX:..."]}}

curl -s "http://localhost:1234/api/v1/server/info?password=*******"
{"status":200,"message":"Success","data":{"computer_id":"[email protected]","os_version":"13.7.8","server_version":"1.9.9","private_api":false,"proxy_service":"XXX","helper_connected":false,"detected_icloud":"appleid_email","detected_imessage":"appleid_email","macos_time_sync":2.137651,"local_ipv4s":["192.168.0.22"],"local_ipv6s":["XXXX:...","XXXX:..."]}}

this is what I get whenever I try to send an imessage to the monitored account:

{"0":"[bluebubbles] webhook rejected: unauthorized guid=***","_meta":{"runtime":"node","runtimeVersion":"22.22.0","hostname":"unknown","name":"openclaw","date":"2026-02-27T03:29:10.826Z","logLevelId":4,"logLevelName":"WARN" ...

{"0":"[bluebubbles] webhook rejected: unauthorized guid=***","_meta":{"runtime":"node","runtimeVersion":"22.22.0","hostname":"unknown","name":"openclaw","date":"2026-02-27T03:29:10.826Z","logLevelId":4,"logLevelName":"WARN" ...

BlueBubbles webhooks auth failure when on same machine as OpenClaw

Setup

In BlueBubbles....

Similar Threads

BlueBubbles webhooks auth failure when on same machine as OpenClaw

Setup

In BlueBubbles....

Similar Threads

Similar Threads

Similar Threads