In backend/open_webui/utils/auth.py, the get_license_data() function has a logic error in the license expiration check that causes a TypeError when the exp field is missing or None.
The condition uses and instead of or. When exp is missing or None:
not data.get("exp") evaluates to True (since None is falsy)
Due to and, Python evaluates the second condition: None < datetime.now().date()
This raises: TypeError: '<\ not supported between instances of 'NoneType' and 'datetime.date'
Reproduction
data={"exp":None}ifnotdata.get("exp")anddata.get("exp")<datetime.now().date():returnFalse# TypeError: '<\ not supported between instances of 'NoneType' and 'datetime.date'
This correctly returns False when exp is missing (treat as expired) OR when exp is in the past.
Environment
Observed on latest main branch
Originally created by @themavik on GitHub (Mar 19, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/22856
## Bug Description
In `backend/open_webui/utils/auth.py`, the `get_license_data()` function has a logic error in the license expiration check that causes a `TypeError` when the `exp` field is missing or `None`.
## Code Location
`backend/open_webui/utils/auth.py`:
```python
if not data.get("exp") and data.get("exp") < datetime.now().date():
return False
```
## Problem
The condition uses `and` instead of `or`. When `exp` is missing or `None`:
1. `not data.get("exp")` evaluates to `True` (since `None` is falsy)
2. Due to `and`, Python evaluates the second condition: `None < datetime.now().date()`
3. This raises: `TypeError: '<\ not supported between instances of 'NoneType' and 'datetime.date'`
## Reproduction
```python
data = {"exp": None}
if not data.get("exp") and data.get("exp") < datetime.now().date():
return False
# TypeError: '<\ not supported between instances of 'NoneType' and 'datetime.date'
```
## Suggested Fix
```python
if not data.get("exp") or data.get("exp") < datetime.now().date():
return False
```
This correctly returns `False` when `exp` is missing (treat as expired) OR when `exp` is in the past.
## Environment
- Observed on latest main branch
GiteaMirror
added the bug label 2026-05-21 02:21:53 -05:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @themavik on GitHub (Mar 19, 2026).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/22856
Bug Description
In
backend/open_webui/utils/auth.py, theget_license_data()function has a logic error in the license expiration check that causes aTypeErrorwhen theexpfield is missing orNone.Code Location
backend/open_webui/utils/auth.py:Problem
The condition uses
andinstead ofor. Whenexpis missing orNone:not data.get("exp")evaluates toTrue(sinceNoneis falsy)and, Python evaluates the second condition:None < datetime.now().date()TypeError: '<\ not supported between instances of 'NoneType' and 'datetime.date'Reproduction
Suggested Fix
This correctly returns
Falsewhenexpis missing (treat as expired) OR whenexpis in the past.Environment