[GH-ISSUE #8424] OAUTH is not respected after container restart #118431

New Issue

GiteaMirror · 2026-05-20T19:48:54-05:00

GiteaMirror commented

2026-05-20 19:48:54 -05:00

Originally created by @mwawrzkow on GitHub (Jan 9, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/8424

Bug Report

Important Notes

Before submitting a bug report: Please check the Issues or Discussions section to see if a similar issue or feature request has already been posted. It's likely we're already tracking it! If you’re unsure, start a discussion post first. This will help us efficiently focus on improving the project.
Collaborate respectfully: We value a constructive attitude, so please be mindful of your communication. If negativity is part of your approach, our capacity to engage may be limited. We’re here to help if you’re open to learning and communicating positively. Remember, Open WebUI is a volunteer-driven project managed by a single maintainer and supported by contributors who also have full-time jobs. We appreciate your time and ask that you respect ours.
Contributing: If you encounter an issue, we highly encourage you to submit a pull request or fork the project. We actively work to prevent contributor burnout to maintain the quality and continuity of Open WebUI.
Bug reproducibility: If a bug cannot be reproduced with a :main or :dev Docker setup, or a pip install with Python 3.11, it may require additional help from the community. In such cases, we will move it to the "issues" Discussions section due to our limited resources. We encourage the community to assist with these issues. Remember, it’s not that the issue doesn’t exist; we need your help!

Note: Please remove the notes above when submitting your post. Thank you for your understanding and support!

Installation Method

[Describe the method you used to install the project, e.g., git clone, Docker, pip, etc.]

Environment

Open WebUI Version: ghcr.io/open-webui/open-webui:0.5.4
Operating System: All
Browser (if applicable): All

Confirmation:

I have read and followed all the instructions provided in the README.md.
I am on the latest version of both Open WebUI and Ollama.
I have included the browser console logs.
I have included the Docker container logs.
I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below.

Expected Behavior:

After a container restart, a user who was previously approved should not be in the state "Waiting for Approval."

Actual Behavior:

Neither User nor Admin account is approved, thus the application locks access for everyone.

Description

Bug Summary:

Authorized users from OAUTH will be locked for pending users after the container restarts.

Reproduction Details

Steps to Reproduce:
[Outline the steps to reproduce the bug. Be as detailed as possible.]
I have encountered an issue while using the Helm chart, which I believe may be related to the Docker images.

Here are my environment variables:

extraEnvVars:
  - name: OAUTH_CLIENT_ID
    value: ...
  - name: OAUTH_CLIENT_SECRET
    value: ...
  - name: OPENID_PROVIDER_URL
    value: "https://.../.well-known/openid-configuration"
  - name: OAUTH_PROVIDER_NAME
    value: "..."
  - name: ENABLE_OAUTH_SIGNUP
    value: "true"
  - name: ENABLE_LOGIN_FORM
    value: "false"
  - name: OAUTH_ROLES_CLAIM
    value: "..."
  - name: OAUTH_ALLOWED_ROLES
    value: "user,admin"
  - name: OAUTH_ADMIN_ROLES
    value: "admin"
  - name: OAUTH_SCOPES
    value: "openai email profile openid"
  - name: ENABLE_OAUTH_ROLE_MANAGEMENT
    value: "true"
  - name: ENABLE_OAUTH_SIGNUP
    value: "true"
  - name: ENV
    value: "prod"
  - name: WEBUI_NAME
    value: "..."
  - name: SSL_CERT_FILE
    value: "..."
  - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
    value: "false"

Logs and Screenshots

Browser Console Logs:
[Include relevant browser console logs, if applicable]

Docker Container Logs:
[Include relevant Docker container logs, if applicable]

Screenshots/Screen Recordings (if applicable):
[Attach any relevant screenshots to help illustrate the issue]

Additional Information

I have reconfigured OpenWebUI, and until the container restarts, I will not be able to provide detailed logs.

I may prepare a fix for this, but I would appreciate guidance on the issue might originate.

[Include any additional details that may help in understanding and reproducing the issue. This could include specific configurations, error messages, or anything else relevant to the bug.]

Note

If the bug report is incomplete or does not follow the provided instructions, it may not be addressed. Please ensure that you have followed the steps outlined in the README.md and troubleshooting.md documents, and provide all necessary information for us to reproduce and address the issue. Thank you!

Originally created by @mwawrzkow on GitHub (Jan 9, 2025). Original GitHub issue: https://github.com/open-webui/open-webui/issues/8424 # Bug Report ## Important Notes - **Before submitting a bug report**: Please check the Issues or Discussions section to see if a similar issue or feature request has already been posted. It's likely we're already tracking it! If you’re unsure, start a discussion post first. This will help us efficiently focus on improving the project. - **Collaborate respectfully**: We value a constructive attitude, so please be mindful of your communication. If negativity is part of your approach, our capacity to engage may be limited. We’re here to help if you’re open to learning and communicating positively. Remember, Open WebUI is a volunteer-driven project managed by a single maintainer and supported by contributors who also have full-time jobs. We appreciate your time and ask that you respect ours. - **Contributing**: If you encounter an issue, we highly encourage you to submit a pull request or fork the project. We actively work to prevent contributor burnout to maintain the quality and continuity of Open WebUI. - **Bug reproducibility**: If a bug cannot be reproduced with a `:main` or `:dev` Docker setup, or a pip install with Python 3.11, it may require additional help from the community. In such cases, we will move it to the "issues" Discussions section due to our limited resources. We encourage the community to assist with these issues. Remember, it’s not that the issue doesn’t exist; we need your help! Note: Please remove the notes above when submitting your post. Thank you for your understanding and support! --- ## Installation Method [Describe the method you used to install the project, e.g., git clone, Docker, pip, etc.] ## Environment - **Open WebUI Version:** ghcr.io/open-webui/open-webui:0.5.4 - **Operating System:** All - **Browser (if applicable):** All **Confirmation:** - [x] I have read and followed all the instructions provided in the README.md. - [x] I am on the latest version of both Open WebUI and Ollama. - [ ] I have included the browser console logs. - [ ] I have included the Docker container logs. - [ ] I have provided the exact steps to reproduce the bug in the "Steps to Reproduce" section below. ## Expected Behavior: After a container restart, a user who was previously approved should not be in the state "Waiting for Approval." ## Actual Behavior: Neither User nor Admin account is approved, thus the application locks access for everyone. ## Description **Bug Summary:** Authorized users from OAUTH will be locked for pending users after the container restarts. ## Reproduction Details **Steps to Reproduce:** [Outline the steps to reproduce the bug. Be as detailed as possible.] I have encountered an issue while using the Helm chart, which I believe may be related to the Docker images. Here are my environment variables: ```yaml extraEnvVars: - name: OAUTH_CLIENT_ID value: ... - name: OAUTH_CLIENT_SECRET value: ... - name: OPENID_PROVIDER_URL value: "https://.../.well-known/openid-configuration" - name: OAUTH_PROVIDER_NAME value: "..." - name: ENABLE_OAUTH_SIGNUP value: "true" - name: ENABLE_LOGIN_FORM value: "false" - name: OAUTH_ROLES_CLAIM value: "..." - name: OAUTH_ALLOWED_ROLES value: "user,admin" - name: OAUTH_ADMIN_ROLES value: "admin" - name: OAUTH_SCOPES value: "openai email profile openid" - name: ENABLE_OAUTH_ROLE_MANAGEMENT value: "true" - name: ENABLE_OAUTH_SIGNUP value: "true" - name: ENV value: "prod" - name: WEBUI_NAME value: "..." - name: SSL_CERT_FILE value: "..." - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL value: "false" ``` ## Logs and Screenshots **Browser Console Logs:** [Include relevant browser console logs, if applicable] **Docker Container Logs:** [Include relevant Docker container logs, if applicable] **Screenshots/Screen Recordings (if applicable):** [Attach any relevant screenshots to help illustrate the issue] ## Additional Information I have reconfigured OpenWebUI, and until the container restarts, I will not be able to provide detailed logs. I may prepare a fix for this, but I would appreciate guidance on the issue might originate. [Include any additional details that may help in understanding and reproducing the issue. This could include specific configurations, error messages, or anything else relevant to the bug.] ## Note If the bug report is incomplete or does not follow the provided instructions, it may not be addressed. Please ensure that you have followed the steps outlined in the README.md and troubleshooting.md documents, and provide all necessary information for us to reproduce and address the issue. Thank you!

GiteaMirror closed this issue

2026-05-20 19:48:54 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#118431