github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-08-30 17:25:30 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

[PR #12467] [CLOSED] feat: LDAP Group-Based Authorization in OpenWebUI #12456 via Auth headers #110232

New Issue
Closed
opened 2026-05-18 09:47:36 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-05-18 09:47:36 -05:00
Owner
Copy Link
Copy Source

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/12467
Author: @codespg
Created: 4/4/2025
Status: ❌ Closed

Base: main ← Head: main

📝 Commits (6)

  • 4be3409 Add Trusted Groups Header for Access Management
  • a5f9310 Add Trusted Groups Header for Access Management in main.py
  • d11b845 Add Trusted Groups Header for Access Management
  • eb5defe Merge branch 'main' into main
  • 90c9f61 updated user_trusted_groups validation
  • a9e65e5 Merge branch 'main' into main

📊 Changes

3 files changed (+105 additions, -0 deletions)

View changed files

📝 backend/open_webui/env.py (+2 -0)
📝 backend/open_webui/main.py (+4 -0)
📝 backend/open_webui/routers/auths.py (+99 -0)

📄 Description

Added Variable - WEBUI_AUTH_TRUSTED_GROUP_HEADER
Used the same variable to Identify the Request Header with Groups to sync in OpenWeb UI.

Group Configuration: Allow administrators to define groups in OpenWebUI and map them to existing LDAP groups.

Setup Apache/Reverse Proxy to send the Request header with Group details in Semicolon delimited.

Automatic Group Assignment: Upon login (via SSO Auth Headers) automatically assign users to their corresponding OpenWebUI groups based on their LDAP group memberships.

Note: The group parsing assumes a semicolon delimited string in the header. If different delimters needed we can configure variable accordingly and add another update.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/12467 **Author:** [@codespg](https://github.com/codespg) **Created:** 4/4/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `main` --- ### 📝 Commits (6) - [`4be3409`](https://github.com/open-webui/open-webui/commit/4be3409c2f0594a150adbe0bc1bcf9affeac80f6) Add Trusted Groups Header for Access Management - [`a5f9310`](https://github.com/open-webui/open-webui/commit/a5f931072eea785fcd612d8c90dbd9f73e9314e8) Add Trusted Groups Header for Access Management in main.py - [`d11b845`](https://github.com/open-webui/open-webui/commit/d11b845de08a64fdf337c3dacacf9d781e933cd7) Add Trusted Groups Header for Access Management - [`eb5defe`](https://github.com/open-webui/open-webui/commit/eb5defeb7aa19ad44136ba3e219bd313f0a487dd) Merge branch 'main' into main - [`90c9f61`](https://github.com/open-webui/open-webui/commit/90c9f615b249865de70a4a98df56ca919a4f5763) updated user_trusted_groups validation - [`a9e65e5`](https://github.com/open-webui/open-webui/commit/a9e65e59130037617766c85f3650be414d66e88b) Merge branch 'main' into main ### 📊 Changes **3 files changed** (+105 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `backend/open_webui/env.py` (+2 -0) 📝 `backend/open_webui/main.py` (+4 -0) 📝 `backend/open_webui/routers/auths.py` (+99 -0) </details> ### 📄 Description Added Variable - WEBUI_AUTH_TRUSTED_GROUP_HEADER Used the same variable to Identify the Request Header with Groups to sync in OpenWeb UI. Group Configuration: Allow administrators to define groups in OpenWebUI and map them to existing LDAP groups. Setup Apache/Reverse Proxy to send the Request header with Group details in Semicolon delimited. Automatic Group Assignment: Upon login (via SSO Auth Headers) automatically assign users to their corresponding OpenWebUI groups based on their LDAP group memberships. Note: The group parsing assumes a semicolon delimited string in the header. If different delimters needed we can configure variable accordingly and add another update. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-05-18 09:47:36 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No labels pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#110232