I have searched the existing issues and discussions.
Problem Description
I am using OpenWebUI v0.6.5 with OIDC OAuth for SSO. I want to fetch my OIDC claims in the pipeline.
My inlet looks like -
async def inlet(self, body: dict, user: dict) -> dict:
# This function is called before the OpenAI API request is made. You can modify the form data before it is sent to the OpenAI API.
print(f"inlet:{__name__}")
print(f"UserInlet: {user}")
return body
Output Log of the pipeline -
inlet:test-aakriti
UserInlet: {'id': '<some-encrypted-id>', 'email': '<my-email>', 'name': '<my-name>', 'role': 'admin'}
//---returned body (but no OIDC claims)---
I would want to return all the scopes and claims passed in the user inlet. One way I tried was to modify the inlet code in the open-webui code (not the pipeline code), but that did not help.
Please let me know if there are any other issues that I can look to, have looked at most of them but no luck.
TIA!
Alternatives Considered
No response
Additional Context
No response
Originally created by @aakritichoudhary on GitHub (May 13, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/13837
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
I am using OpenWebUI v0.6.5 with OIDC OAuth for SSO. I want to fetch my OIDC claims in the pipeline.
My inlet looks like -
```
async def inlet(self, body: dict, user: dict) -> dict:
# This function is called before the OpenAI API request is made. You can modify the form data before it is sent to the OpenAI API.
print(f"inlet:{__name__}")
print(f"UserInlet: {user}")
return body
```
Output Log of the pipeline -
```
inlet:test-aakriti
UserInlet: {'id': '<some-encrypted-id>', 'email': '<my-email>', 'name': '<my-name>', 'role': 'admin'}
//---returned body (but no OIDC claims)---
```
Claims passed in the .env -
```
OAUTH_USERNAME_CLAIM=firstName
OAUTH_EMAIL_CLAIM=email
OAUTH_ID_CLAIM=uid
OIDC_SCOPES=openid profile LDAPGroups
```
### Desired Solution you'd like
I would want to return all the scopes and claims passed in the user inlet. One way I tried was to modify the inlet code in the open-webui code (not the pipeline code), but that did not help.
Please let me know if there are any other issues that I can look to, have looked at most of them but no luck.
TIA!
### Alternatives Considered
_No response_
### Additional Context
_No response_
@aakritichoudhary commented on GitHub (May 14, 2025):
Modified few files to get claims via the GET /api/v1/auths endpoint, but only extra field that is coming is oauth_sub, not other field. If I can get other OIDC claims in this endpoint, it will be helpful.
<!-- gh-comment-id:2879672064 -->
@aakritichoudhary commented on GitHub (May 14, 2025):
Modified few files to get claims via the ```GET /api/v1/auths``` endpoint, but only extra field that is coming is oauth_sub, not other field. If I can get other OIDC claims in this endpoint, it will be helpful.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @aakritichoudhary on GitHub (May 13, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/13837
Check Existing Issues
Problem Description
I am using OpenWebUI v0.6.5 with OIDC OAuth for SSO. I want to fetch my OIDC claims in the pipeline.
My inlet looks like -
Output Log of the pipeline -
Claims passed in the .env -
Desired Solution you'd like
I would want to return all the scopes and claims passed in the user inlet. One way I tried was to modify the inlet code in the open-webui code (not the pipeline code), but that did not help.
Please let me know if there are any other issues that I can look to, have looked at most of them but no luck.
TIA!
Alternatives Considered
No response
Additional Context
No response
@aakritichoudhary commented on GitHub (May 14, 2025):
Modified few files to get claims via the
GET /api/v1/authsendpoint, but only extra field that is coming is oauth_sub, not other field. If I can get other OIDC claims in this endpoint, it will be helpful.