I have searched the existing issues and discussions.
Problem Description
In scenarios where an application uses Open WebUI as a gateway to manage user access, there is a need for the application to access Open WebUI on behalf of specific users. Currently, there may be a gap in functionality, as there is no apparent method for an admin user to retrieve a user's API key via the Open WebUI API. This limitation can hinder seamless application integration and prevent smooth delegation of access on behalf of users.
Desired Solution you'd like
Introduce a feature in the Open WebUI API that allows an admin user to retrieve a specific user's API key. This functionality would enable the application to act on behalf of the user by using their API key to access Open WebUI. The solution should include appropriate security measures, such as:
Strict role-based access control (RBAC) to ensure that only authorized admin users can access user API keys.
Audit logging to track when and by whom API keys are accessed for transparency and compliance.
This enhancement would streamline integrations and improve the flexibility of applications interacting with Open WebUI on behalf of users.
Alternatives Considered
No response
Additional Context
No response
Originally created by @shohamyamin on GitHub (Mar 26, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12086
### Check Existing Issues
- [x] I have searched the existing issues and discussions.
### Problem Description
In scenarios where an application uses Open WebUI as a gateway to manage user access, there is a need for the application to access Open WebUI on behalf of specific users. Currently, there may be a gap in functionality, as there is no apparent method for an admin user to retrieve a user's API key via the Open WebUI API. This limitation can hinder seamless application integration and prevent smooth delegation of access on behalf of users.
### Desired Solution you'd like
Introduce a feature in the Open WebUI API that allows an admin user to retrieve a specific user's API key. This functionality would enable the application to act on behalf of the user by using their API key to access Open WebUI. The solution should include appropriate security measures, such as:
- Strict role-based access control (RBAC) to ensure that only authorized admin users can access user API keys.
- Audit logging to track when and by whom API keys are accessed for transparency and compliance.
This enhancement would streamline integrations and improve the flexibility of applications interacting with Open WebUI on behalf of users.
### Alternatives Considered
_No response_
### Additional Context
_No response_
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @shohamyamin on GitHub (Mar 26, 2025).
Original GitHub issue: https://github.com/open-webui/open-webui/issues/12086
Check Existing Issues
Problem Description
In scenarios where an application uses Open WebUI as a gateway to manage user access, there is a need for the application to access Open WebUI on behalf of specific users. Currently, there may be a gap in functionality, as there is no apparent method for an admin user to retrieve a user's API key via the Open WebUI API. This limitation can hinder seamless application integration and prevent smooth delegation of access on behalf of users.
Desired Solution you'd like
Introduce a feature in the Open WebUI API that allows an admin user to retrieve a specific user's API key. This functionality would enable the application to act on behalf of the user by using their API key to access Open WebUI. The solution should include appropriate security measures, such as:
This enhancement would streamline integrations and improve the flexibility of applications interacting with Open WebUI on behalf of users.
Alternatives Considered
No response
Additional Context
No response
@tjbck commented on GitHub (Mar 27, 2025):
You can do this via python scripts.